Skip to main content
SpringerLink
Log in

Access Control Policy Languages

  • Reference work entry
  • First Online:
Encyclopedia of Database Systems

  • 78 Accesses

Synonyms

Authorization policy languages

Definition

An access control policy language is a particular set of grammar, syntax rules (logical and mathematical), and operators which provides an abstraction-layer for access control policy specifications. Such languages combine individual rules into a single policy set, which is the basis for (user/subject) authorization decisions on accessing content (object) stored in various information resources. The operators of an access control policy language are used on attributes of the subject, resource (object), and their underlying application framework to facilitate identifying the policy that (most appropriately) applies to a given action.

Historical Background

The evolution of access control policy languages is inline with the evolving large-scale highly distributed information systems and the Internet, which turned the tasks of authorizing and controlling of accessing on a global enterprise (or on Internet) framework increasingly challenging...

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 4,499.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Hardcover Book
USD 6,499.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Recommended Reading

  1. Stoupa K, Vakali A. Policies for web security services, chapter III. In: Ferrari E, Thuraisingham B, editors. Web and information security. Hershey: Idea-Group Publishing; 2006.

    Google Scholar 

  2. Vuong NN, Smith GS, Deng Y. Managing security policies in a distributed environment using eXtensible markup language (XML). In: Proceedings of the 16th ACM Symposium on Applied Computing; 2001. p. 405–11.

    Google Scholar 

  3. Alm C, Wolf R, Posegga J. The OPL access control policy language. In: Fischer-H¨ubner S, et al., editors. TrustBus 2009, LNCS 5695. Berlin/Heidelberg: Springer; 2009. p. 138–48.

    Chapter  Google Scholar 

  4. Bertino E, Castano S, Ferrari E. On specifying security policies for web documents with an XML-based language. In: Proceedings of the 6th ACM Symposium on Access Control Models and Technologies; 2001. p. 57–65.

    Google Scholar 

  5. Bertino E, Castano S, Ferrari E. Securing XML documents with author-X. IEEE Internet Comput. 2001;5(3):21–31.

    Article  Google Scholar 

  6. Damiani E, De Capitani di Vimercati S, Paraboschi S, Samarati P. Design and implementation of an access control processor for XML documents. In: Proceedings of the 9th International World Wide Web Conference; 2000. p. 59–75.

    Article  Google Scholar 

  7. He H, Wong RK. A role-based access control model for XML repositories. In: Proceedings of the 1st International Conference on Web Information Systems Engineering; 2000. p. 138–45.

    Google Scholar 

  8. Stoupa K. Access control techniques in distributed systems and the Internet. Ph.D. Thesis, Aristotle University, Department of Informatics; 2007.

    Google Scholar 

  9. Fong PWL. Relationship-based access control: protection model and policy language. In: Proceedings of the 1st ACM Conference on Data and Application Security and Privacy; 2011. p. 191–202.

    Google Scholar 

  10. Rachapalli J, Khadilkar V, Kantarcioglu M, Thuraisingham B. Redaction based RDF access control language. In: Proceedings of the 19th ACM Symposium on Access Control Models and Technologies; 2014. p. 177–80.

    Google Scholar 

  11. Qi N, Kud M. Access control policy languages in XML, applications and trends. Springer Science+Business Media, LLC; 2008. p. 55–71.

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Aristotle University, Thessaloniki, Greece

    Athena Vakali

Authors
  1. Athena Vakali
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Athena Vakali .

Editor information

Editors and Affiliations

  1. Georgia Institute of Technology College of Computing, Atlanta, GA, USA

    Ling Liu

  2. University of Waterloo School of Computer Science, Waterloo, ON, Canada

    M. Tamer Özsu

Section Editor information

  1. DiSTA, Univ. of Insubria, Varese, Italy

    Elena Ferrari

Rights and permissions

Reprints and permissions

Copyright information

© 2018 Springer Science+Business Media, LLC, part of Springer Nature

About this entry

Check for updates. Verify currency and authenticity via CrossMark

Cite this entry

Vakali, A. (2018). Access Control Policy Languages. In: Liu, L., Özsu, M.T. (eds) Encyclopedia of Database Systems. Springer, New York, NY. https://doi.org/10.1007/978-1-4614-8265-9_5

Download citation

Publish with us

Policies and ethics

Search

Navigation