{"id":"https://openalex.org/W2890161843","doi":"https://doi.org/10.1145/3209668","title":"The Challenge of Access Control Policies Quality","display_name":"The Challenge of Access Control Policies Quality","publication_year":2018,"publication_date":"2018-06-30","ids":{"openalex":"https://openalex.org/W2890161843","doi":"https://doi.org/10.1145/3209668","mag":"2890161843"},"language":"en","primary_location":{"id":"doi:10.1145/3209668","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3209668","pdf_url":null,"source":{"id":"https://openalex.org/S110189822","display_name":"Journal of Data and Information Quality","issn_l":"1936-1955","issn":["1936-1955","1936-1963"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Data and Information Quality","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061694501","display_name":"Elisa Bertino","orcid":"https://orcid.org/0000-0002-4029-7051"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Elisa Bertino","raw_affiliation_strings":["Purdue University, West Lafayette IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072375083","display_name":"Amani Abu Jabal","orcid":"https://orcid.org/0000-0002-2247-8860"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amani Abu Jabal","raw_affiliation_strings":["Purdue University, West Lafayette IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041645148","display_name":"Seraphin Calo","orcid":"https://orcid.org/0000-0003-4668-3989"},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seraphin Calo","raw_affiliation_strings":["IBM TJ Watson Research Center, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM TJ Watson Research Center, NY, USA","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077318302","display_name":"Dinesh Verma","orcid":"https://orcid.org/0000-0003-1933-7343"},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dinesh Verma","raw_affiliation_strings":["IBM TJ Watson Research Center, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM TJ Watson Research Center, NY, USA","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101643011","display_name":"Christopher Williams","orcid":"https://orcid.org/0000-0001-5767-8048"},"institutions":[{"id":"https://openalex.org/I1339065421","display_name":"Defence Science and Technology Laboratory","ror":"https://ror.org/04jswqb94","country_code":"GB","type":"government","lineage":["https://openalex.org/I1306956679","https://openalex.org/I1339065421","https://openalex.org/I2802373619"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Christopher Williams","raw_affiliation_strings":["The Defence Science and Technology Laboratory, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Defence Science and Technology Laboratory, UK","institution_ids":["https://openalex.org/I1339065421"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.2272,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.96698157,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"10","issue":"2","first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9904999732971191,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.8087586164474487},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.808140754699707},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.7429642677307129},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.7303174734115601},{"id":"https://openalex.org/keywords/completeness","display_name":"Completeness (order theory)","score":0.6335080862045288},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.5510228872299194},{"id":"https://openalex.org/keywords/policy-analysis","display_name":"Policy analysis","score":0.5382764935493469},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.5354822874069214},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5341830253601074},{"id":"https://openalex.org/keywords/quality-assurance","display_name":"Quality assurance","score":0.506524920463562},{"id":"https://openalex.org/keywords/data-quality","display_name":"Data quality","score":0.4720371961593628},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3342345356941223},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.32515403628349304},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.10341140627861023},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.0903242826461792},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08695906400680542},{"id":"https://openalex.org/keywords/public-administration","display_name":"Public administration","score":0.08481472730636597},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.0773078203201294}],"concepts":[{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.8087586164474487},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.808140754699707},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7429642677307129},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.7303174734115601},{"id":"https://openalex.org/C17231256","wikidata":"https://www.wikidata.org/wiki/Q5156540","display_name":"Completeness (order theory)","level":2,"score":0.6335080862045288},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.5510228872299194},{"id":"https://openalex.org/C123587114","wikidata":"https://www.wikidata.org/wiki/Q2101508","display_name":"Policy analysis","level":2,"score":0.5382764935493469},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.5354822874069214},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5341830253601074},{"id":"https://openalex.org/C106436119","wikidata":"https://www.wikidata.org/wiki/Q836575","display_name":"Quality assurance","level":3,"score":0.506524920463562},{"id":"https://openalex.org/C24756922","wikidata":"https://www.wikidata.org/wiki/Q1757694","display_name":"Data quality","level":3,"score":0.4720371961593628},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3342345356941223},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.32515403628349304},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.10341140627861023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0903242826461792},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08695906400680542},{"id":"https://openalex.org/C3116431","wikidata":"https://www.wikidata.org/wiki/Q31728","display_name":"Public administration","level":1,"score":0.08481472730636597},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0773078203201294},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3209668","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3209668","pdf_url":null,"source":{"id":"https://openalex.org/S110189822","display_name":"Journal of Data and Information Quality","issn_l":"1936-1955","issn":["1936-1955","1936-1963"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Data and Information Quality","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6533182773","display_name":null,"funder_award_id":"IIS-1636891","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1528231922","https://openalex.org/W1980437932","https://openalex.org/W2011274796","https://openalex.org/W2062573048","https://openalex.org/W2073300799","https://openalex.org/W2076004681","https://openalex.org/W2083566269","https://openalex.org/W2128340847","https://openalex.org/W2132247000","https://openalex.org/W2146356111","https://openalex.org/W2149101014","https://openalex.org/W2166602595","https://openalex.org/W2341832822","https://openalex.org/W2528861271","https://openalex.org/W2787594205","https://openalex.org/W4205449645","https://openalex.org/W4253790261"],"related_works":["https://openalex.org/W2393973626","https://openalex.org/W2107355607","https://openalex.org/W2012419258","https://openalex.org/W318167434","https://openalex.org/W1485764028","https://openalex.org/W1482564230","https://openalex.org/W4285408982","https://openalex.org/W2127259385","https://openalex.org/W2004929657","https://openalex.org/W3178932601"],"abstract_inverted_index":{"Access":[0],"Control":[1],"policies":[2,22,58,85],"allow":[3],"one":[4],"to":[5,61],"control":[6],"data":[7,15],"sharing":[8],"among":[9],"multiple":[10],"subjects.":[11],"For":[12],"high":[13],"assurance":[14],"security,":[16],"it":[17],"is":[18],"critical":[19],"that":[20],"such":[21,44],"be":[23],"fit":[24],"for":[25,74],"their":[26],"purpose.":[27],"In":[28],"this":[29],"paper":[30],"we":[31],"introduce":[32,51],"the":[33,55,62],"notion":[34],"of":[35,57,79,84],"\u201cpolicy":[36],"quality\u201d":[37],"and":[38,48,66,82],"elaborate":[39,67],"on":[40,68],"its":[41],"many":[42],"dimensions,":[43],"as":[45],"consistency,":[46],"completeness,":[47],"minimality.":[49],"We":[50],"a":[52],"framework":[53],"supporting":[54],"analysis":[56,73,83],"with":[59],"respect":[60],"introduced":[63],"quality":[64],"dimensions":[65],"research":[69],"challenges,":[70],"including":[71],"policy":[72,80,89],"large-scale":[75],"distributed":[76],"systems,":[77],"assessment":[78],"correctness,":[81],"expressed":[86],"in":[87],"richer":[88],"models.":[90]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":6}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}