Policy of Composition ? Composition of Policies

User-Generated Services Composition in Smart Multi-User Environments

“…In this perspective, already discussed techniques based on static composition of policies such [10,14] may not be suitable for highly dynamic environments.…”

“…In addition, Ref. [10] presents an approach that merges existing policies and restrictions into a new policy to remove redundancy and inconsistencies. It is important to point out how the process of policy composition might be very expensive from a computational perspective; as a consequence, these solutions can only be applied if we assume static policies (i.e., not changing over the time), so that the composition process can be performed only once off-line, when the composite service is made up.…”

“…This process, however, may give rise to several security issues due to the composition of the service-related Access Control Policies (ACP). For example, when an application developer assembles existing services that have their own security policies, he must ensure that the resultant policies do not conflict with the existing ones [10].…”

L2TAP+SCIP: An Audit-based Privacy Framework Leveraging Linked Data

“…The authors of [23] leverage the linked data architecture for providing authorizations (based on WebID [24]) and access restrictions at the document level. To address the privacy concerns in the emerging domains of linked data usage, the authors of [25] propose a privacy framework for policy specification and access control enforcement. The preceding five proposals support privacy by restricting access to information, without addressing privacy aspects such as usage and post-conditions on access.…”