SoK: Access Control Policy Generation from High-level Natural Language Requirements

Understand

Administrator-centered access control failures can cause data breaches, putting organizations at risk of financial loss and reputation damage.

• Existing graphical policy configuration tools and automated policy generation frameworks attempt to help administrators configure and generate access control policies by avoiding such failures.
• However, graphical policy configuration tools are prone to human errors, making them unusable.
• On the other hand, automated policy generation frameworks are prone to erroneous predictions, making them unreliable.