{"id":"https://openalex.org/W4414648726","doi":"https://doi.org/10.1109/icws67624.2025.00120","title":"Scalable Policy-as-Code Decision Points for Data Products","display_name":"Scalable Policy-as-Code Decision Points for Data Products","publication_year":2025,"publication_date":"2025-07-07","ids":{"openalex":"https://openalex.org/W4414648726","doi":"https://doi.org/10.1109/icws67624.2025.00120"},"language":"en","primary_location":{"id":"doi:10.1109/icws67624.2025.00120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icws67624.2025.00120","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Web Services (ICWS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hdl.handle.net/11311/1307670","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054141163","display_name":"Matteo Brambilla","orcid":null},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Matteo Brambilla","raw_affiliation_strings":["Politecnico di Milano,Dipartimento di Elettronica Informazione e Bioingegneria,Milan,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano,Dipartimento di Elettronica Informazione e Bioingegneria,Milan,Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038496883","display_name":"Pierluigi Plebani","orcid":"https://orcid.org/0000-0001-8245-226X"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Pierluigi Plebani","raw_affiliation_strings":["Politecnico di Milano,Dipartimento di Elettronica Informazione e Bioingegneria,Milan,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano,Dipartimento di Elettronica Informazione e Bioingegneria,Milan,Italy","institution_ids":["https://openalex.org/I93860229"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I93860229"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"924","last_page":"930"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11450","display_name":"Model-Driven Software Engineering Techniques","score":0.9692999720573425,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11450","display_name":"Model-Driven Software Engineering Techniques","score":0.9692999720573425,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9605000019073486,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.6334999799728394},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5252000093460083},{"id":"https://openalex.org/keywords/replication","display_name":"Replication (statistics)","score":0.4966999888420105},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.46480000019073486},{"id":"https://openalex.org/keywords/data-integrity","display_name":"Data integrity","score":0.4442000091075897},{"id":"https://openalex.org/keywords/product","display_name":"Product (mathematics)","score":0.4316999912261963},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4250999987125397},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4242999851703644},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.4023999869823456}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6869999766349792},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.6334999799728394},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5252000093460083},{"id":"https://openalex.org/C12590798","wikidata":"https://www.wikidata.org/wiki/Q3933199","display_name":"Replication (statistics)","level":2,"score":0.4966999888420105},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.46480000019073486},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.4442000091075897},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.44190001487731934},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.4316999912261963},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4250999987125397},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4242999851703644},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.4023999869823456},{"id":"https://openalex.org/C1668388","wikidata":"https://www.wikidata.org/wiki/Q1149776","display_name":"Data management","level":2,"score":0.4016000032424927},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3709000051021576},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3653999865055084},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.36469998955726624},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.3384999930858612},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.33719998598098755},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3109000027179718},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3093000054359436},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.3009999990463257},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2946999967098236},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.2921999990940094},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.28459998965263367},{"id":"https://openalex.org/C93361087","wikidata":"https://www.wikidata.org/wiki/Q4426698","display_name":"Data consistency","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C97300177","wikidata":"https://www.wikidata.org/wiki/Q1994744","display_name":"Data as a service","level":3,"score":0.2800999879837036},{"id":"https://openalex.org/C107327155","wikidata":"https://www.wikidata.org/wiki/Q330268","display_name":"Decision support system","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.26980000734329224},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2612999975681305},{"id":"https://openalex.org/C2778029271","wikidata":"https://www.wikidata.org/wiki/Q5421931","display_name":"Extension (predicate logic)","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.2572000026702881},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.25609999895095825},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.2524000108242035}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icws67624.2025.00120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icws67624.2025.00120","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Web Services (ICWS)","raw_type":"proceedings-article"},{"id":"pmh:oai:re.public.polimi.it:11311/1307670","is_oa":true,"landing_page_url":"https://hdl.handle.net/11311/1307670","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:re.public.polimi.it:11311/1307670","is_oa":true,"landing_page_url":"https://hdl.handle.net/11311/1307670","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1618082515","https://openalex.org/W2015320394","https://openalex.org/W2087834864","https://openalex.org/W2595526431","https://openalex.org/W2808767927","https://openalex.org/W3114129435","https://openalex.org/W4221034655","https://openalex.org/W4295875382","https://openalex.org/W4320802107","https://openalex.org/W4386858685","https://openalex.org/W4401396940","https://openalex.org/W4403422829"],"related_works":[],"abstract_inverted_index":{"Data":[0],"products":[1,144],"are":[2],"emerging":[3],"as":[4],"architectural":[5],"elements":[6],"of":[7,13,26,62,96,120,129,157,162,186,210,224],"data":[8,15,28,73,79,109,112,143,214],"mesh":[9,74,88],"with":[10,52,64,141],"the":[11,20,24,31,35,72,82,86,94,97,138,142,155,160,187,193,197,207,227],"aim":[12],"improving":[14],"management":[16,229],"within":[17],"organizations.":[18],"Among":[19],"main":[21],"aspects":[22,47],"in":[23,71,122],"design":[25],"a":[27,91,118,151,233],"product":[29],"is":[30,68,201,206,230],"need":[32],"to":[33,75,78,104,108,124,133,153,164,168,203,222],"define":[34,204],"policies":[36,42,139,163],"that":[37,171],"regulate":[38,76],"its":[39],"access.":[40],"These":[41],"concern":[43],"not":[44],"only":[45,137],"security":[46],"but,":[48],"more":[49],"generally,":[50],"compliance":[51],"regulations":[53],"(e.g.,":[54],"GDPR,":[55],"HIPAA)":[56],"or":[57],"organizational":[58],"regulations.":[59],"Taking":[60],"advantage":[61],"similarities":[63],"microservice-based":[65,92],"solutions,":[66],"policy-as-code":[67],"also":[69],"used":[70],"access":[77,107],"products.":[80,113],"Following":[81],"proposed":[83],"models":[84],"for":[85],"service":[87],"which":[89,205,213],"regulates":[90],"environment,":[93],"performance":[95],"Policy":[98,235],"Decision":[99],"Point":[100],"(PDP)":[101],"becomes":[102],"crucial":[103],"ensure":[105],"efficient":[106],"managed":[110],"by":[111],"Since":[114],"this":[115],"may":[116],"require":[117],"replication":[119,156],"PDPs,":[121],"order":[123],"achieve":[125],"true":[126],"scalability,":[127],"each":[128,223],"them":[130],"will":[131],"have":[132],"take":[134],"into":[135],"account":[136],"associated":[140],"under":[145],"their":[146],"responsibilities.":[147],"This":[148],"work":[149,179],"provides":[150],"solution":[152],"automate":[154],"PDPs":[158,211],"and":[159,175,212,216],"distribution":[161],"be":[165,220],"controlled":[166],"according":[167],"an":[169,184],"approach":[170],"balances":[172],"policy":[173,228],"consistency":[174],"system":[176],"scalability.":[177],"The":[178],"has":[180],"been":[181],"validated":[182],"through":[183],"extension":[185],"Kubernetes":[188],"orchestrator":[189],"that,":[190],"based":[191,231],"on":[192,232],"information":[194],"collected":[195],"from":[196],"monitoring":[198],"system,":[199],"it":[200],"able":[202],"right":[208],"number":[209],"product,":[215],"related":[217],"policies,":[218],"should":[219],"assigned":[221],"them.":[225],"Notably,":[226],"Open":[234],"Agent":[236],"(OPA)":[237],"implementation.":[238]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
