{"id":"https://openalex.org/W3172913619","doi":"https://doi.org/10.1145/3450569.3463558","title":"Can I Reach You? Do I Need To? New Semantics in Security Policy Specification and Testing","display_name":"Can I Reach You? Do I Need To? New Semantics in Security Policy Specification and Testing","publication_year":2021,"publication_date":"2021-06-11","ids":{"openalex":"https://openalex.org/W3172913619","doi":"https://doi.org/10.1145/3450569.3463558","mag":"3172913619"},"language":"en","primary_location":{"id":"doi:10.1145/3450569.3463558","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3450569.3463558","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3450569.3463558","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3450569.3463558","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054016248","display_name":"Charalampos Katsis","orcid":"https://orcid.org/0000-0002-1876-8478"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Charalampos Katsis","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056918306","display_name":"Fabrizio Cicala","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fabrizio Cicala","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051226686","display_name":"Dan Thomsen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210103432","display_name":"Smart Information Flow Technologies (United States)","ror":"https://ror.org/01hnzmd62","country_code":"US","type":"company","lineage":["https://openalex.org/I4210103432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Thomsen","raw_affiliation_strings":["SIFT, LLC, Minneapolis, MN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SIFT, LLC, Minneapolis, MN, USA","institution_ids":["https://openalex.org/I4210103432"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052035492","display_name":"Nathan Ringo","orcid":"https://orcid.org/0000-0002-6782-1554"},"institutions":[{"id":"https://openalex.org/I4210103432","display_name":"Smart Information Flow Technologies (United States)","ror":"https://ror.org/01hnzmd62","country_code":"US","type":"company","lineage":["https://openalex.org/I4210103432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nathan Ringo","raw_affiliation_strings":["SIFT, LLC, Minneapolis, MN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SIFT, LLC, Minneapolis, MN, USA","institution_ids":["https://openalex.org/I4210103432"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061694501","display_name":"Elisa Bertino","orcid":"https://orcid.org/0000-0002-4029-7051"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Elisa Bertino","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.3692,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.96693278,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"165","last_page":"174"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8415913581848145},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.6765499711036682},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.6272778511047363},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5542895197868347},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.5253336429595947},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.41898220777511597},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.4172559380531311},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32083773612976074},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.19486480951309204},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.18316590785980225},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14896684885025024}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8415913581848145},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.6765499711036682},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.6272778511047363},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5542895197868347},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5253336429595947},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.41898220777511597},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.4172559380531311},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32083773612976074},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.19486480951309204},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.18316590785980225},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14896684885025024},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3450569.3463558","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3450569.3463558","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3450569.3463558","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3450569.3463558","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3450569.3463558","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3450569.3463558","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4300000071525574,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G80255033","display_name":null,"funder_award_id":"FA8750-19-C-0082","funder_id":"https://openalex.org/F4320338294","funder_display_name":"Air Force Research Laboratory"}],"funders":[{"id":"https://openalex.org/F4320338294","display_name":"Air Force Research Laboratory","ror":"https://ror.org/02e2egq70"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3172913619.pdf","grobid_xml":"https://content.openalex.org/works/W3172913619.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W72463235","https://openalex.org/W578547746","https://openalex.org/W1552329465","https://openalex.org/W1600255172","https://openalex.org/W1972777832","https://openalex.org/W2007800003","https://openalex.org/W2087047390","https://openalex.org/W2103800010","https://openalex.org/W2104914168","https://openalex.org/W2107726111","https://openalex.org/W2109955777","https://openalex.org/W2120561608","https://openalex.org/W2138381338","https://openalex.org/W2144338762","https://openalex.org/W2146356111","https://openalex.org/W2147118406","https://openalex.org/W2147972209","https://openalex.org/W2154765153","https://openalex.org/W2248064281","https://openalex.org/W2403202602","https://openalex.org/W2495778067","https://openalex.org/W2733592890","https://openalex.org/W2766954398","https://openalex.org/W2807032814","https://openalex.org/W2882265941","https://openalex.org/W2976189582","https://openalex.org/W2977550872","https://openalex.org/W3029079905","https://openalex.org/W3089682163","https://openalex.org/W3122557333","https://openalex.org/W4247255165","https://openalex.org/W4299610943"],"related_works":["https://openalex.org/W3087250444","https://openalex.org/W2392646799","https://openalex.org/W2188814192","https://openalex.org/W1519114293","https://openalex.org/W2151761340","https://openalex.org/W2404921573","https://openalex.org/W2046888001","https://openalex.org/W324732778","https://openalex.org/W1894319312","https://openalex.org/W2379121684"],"abstract_inverted_index":{"The":[0],"zero":[1],"trust":[2],"principle":[3,21],"only":[4,28],"allows":[5],"authorized":[6],"and":[7,33,56,65,85,119,135,154,159],"authenticated":[8],"actions":[9],"in":[10,40],"a":[11,42,49,74,81,86,104,140],"computer":[12],"network.":[13],"A":[14],"network":[15,25,54,63,87,133,162],"policy":[16,45,76,115],"satisfies":[17],"the":[18,24,53,58,99,112,122],"least":[19,43],"privilege":[20,44],"by":[22,31,72],"minimizing":[23],"permissions":[26],"to":[27,79,110,152],"those":[29,70,91],"needed":[30],"users":[32],"applications.":[34],"However,":[35],"administrators":[36],"face":[37],"many":[38],"challenges":[39,71],"creating":[41],"since":[46],"it":[47],"requires":[48],"detailed":[50],"understanding":[51],"of":[52,61,101,114,161],"topology":[55],"knowing":[57],"communication":[59,83],"requirements":[60,84,92],"every":[62],"application":[64],"user.":[66],"This":[67],"paper":[68],"addresses":[69],"introducing":[73],"graph-based":[75],"specification":[77],"framework":[78],"capture":[80],"network's":[82],"compiler":[88],"that":[89],"turns":[90],"into":[93],"an":[94],"enforceable":[95],"policy.":[96],"To":[97],"offset":[98],"effort":[100],"building":[102],"such":[103],"stringent":[105],"policy,":[106],"we":[107,124,166],"incorporate":[108],"patterns":[109],"spread":[111],"work":[113],"creation":[116],"over":[117],"time":[118],"people.":[120],"In":[121],"paper,":[123],"first":[125],"elaborate":[126],"on":[127],"how":[128],"our":[129,149],"framework's":[130,150],"semantics":[131],"enhances":[132],"security":[134,163],"resilience.":[136],"We":[137],"then":[138],"introduce":[139],"Security":[141],"Policy":[142],"Regression":[143],"Testing":[144],"tool":[145],"(SPRT),":[146],"which":[147],"leverages":[148],"semantics,":[151],"test":[153],"reason":[155],"about":[156],"consistency,":[157],"correctness,":[158],"relevance":[160],"policies.":[164],"Finally,":[165],"outline":[167],"relevant":[168],"research":[169],"directions.":[170]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}