The problem with these frameworks:
"Domain-specificity" is problematic
- Reworking/extending existing frameworks becomes more complicated
- Can introduce errors during the process
Introduction
- In a general setting, policies can be defined as systematic sets of statements to assist practitioners and decisions about the appropriate responses for specific circumstances
- Policies are typically written in natural language
- Natural language policies can often be ambiguous, incomplete, and subjective.
- Computable policies (CPs) are machine-readable formalizations of natural language policies
- CPs also enable automation of policy evaluation process through software called evaluation engines
- CPs are implemented using frameworks (systems or specifications of syntax that guarantee machine-readability and give meaning to the underlying data)
Frameworks are used in many contexts, including:
- Access control, e.g.,
- Healthcare, e.g.,
Addressing the problems of domain-specificity
- Propose the use of domain-specific knowledge expressed in machine-readable formats (i.e., knowledge graphs) incorporated inside CPs
- Benefits:
- Ensures machine-readability
- Mitigates inconsistencies
- Enables use of domain knowledge during evaluation
Problem:
- Few frameworks use this approach
- Of the frameworks that use this approach, very few provide tools to work in those frameworks
