Towards an Automated Extraction of ABAC Constraints from Natural Language Policies - ICT Systems Security and Privacy Protection
Conference Papers Year : 2019

Towards an Automated Extraction of ABAC Constraints from Natural Language Policies

Hassan Takabi
  • Function : Author
  • PersonId : 999039
Eduardo Blanco
  • Function : Author
  • PersonId : 1153500

Abstract

Due to the recent trend towards attribute-based access control (ABAC), several studies have proposed constraints specification languages for ABAC. These formal languages enable security architects to express constraints in a precise mathematical notation. However, since manually formulating constraints involves analyzing multiple natural language policy documents in order to infer constraints-relevant information, constraints specification becomes a repetitive, time-consuming and error-prone task. To bridge the gap between the natural language expression of constraints and formal representations, we propose an automated framework to infer elements forming ABAC constraints from natural language policies. Our proposed approach is built upon recent advancements in natural language processing, specifically, sequence labeling. The experiments, using Bidirectional Long-Short Term Memory (BiLSTM), achieved an F1 score of 0.91 in detecting at least 75% of each constraint expression. The results suggest that the proposed approach holds promise for enabling this automation.
Fichier principal
Vignette du fichier
485650_1_En_8_Chapter.pdf (511.52 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03744313 , version 1 (02-08-2022)

Licence

Identifiers

Cite

Manar Alohaly, Hassan Takabi, Eduardo Blanco. Towards an Automated Extraction of ABAC Constraints from Natural Language Policies. 34th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2019, Lisbon, Portugal. pp.105-119, ⟨10.1007/978-3-030-22312-0_8⟩. ⟨hal-03744313⟩
31 View
193 Download

Altmetric

Share

More