Citation Context

...ased security, privacy and trust on the Semantic Web and does not deal with approaches based on individual trust ratings and propagation through a web of trust providing means to rate unknown sources =-=[15, 16, 17]-=-. 2 Policy Based Interaction and Evaluation Policies allow for security and privacy descriptions in a machine understandable way. More specifically, service or information providers may use security p...

Citation Context

... it implies that not all policies are known in advance but they may be disclosed at a later stage. Therefore, a negotiation protocol in which security and trust is iteratively established is required =-=[13]-=-. However, specifying policies is as difficult as writing imperative code, getting a policy right is as hard as getting a piece of software correct, and maintaining a large number of them is even hard...

Citation Context

...s), and to estimate trust based on parties’ properties (trust management policies) [2]. Distributed access control has addressed some of these issues though not solved them yet. Examples like KeyNote =-=[3]-=- or PolicyMaker [4] provide a separation between enforcement and decision mechanisms by means of policies. However, policies are bound to public keys (identities) and are not expressive enough to deal...

Citation Context

...ased security, privacy and trust on the Semantic Web and does not deal with approaches based on individual trust ratings and propagation through a web of trust providing means to rate unknown sources =-=[15, 16, 17]-=-. 2 Policy Based Interaction and Evaluation Policies allow for security and privacy descriptions in a machine understandable way. More specifically, service or information providers may use security p...

Citation Context

...uage, and only describes purpose for the gathered data) and it does not allow for enforcement mechanisms. On the other hand, there is a wide offer of policy languages that have been developed to date =-=[5, 6, 7, 8, 9]-=-, addressing the general requirements for a Semantic Web policy language: expressiveness, simplicity, enforceability, scalability, and analyzability [10]. These policies can be exchanged between entit...

Citation Context

...n mechanisms in which users must authenticate themselves (either by means of certificates or typing a user name and password). Semantic Web policies overcome such limitations of the Web. Kagal et al. =-=[6]-=- describe how the REI language can be applied in order to control access to web resources. Web pages are marked up with policies specifying which credentials are required to access such pages. A polic...

Citation Context

...uage, and only describes purpose for the gathered data) and it does not allow for enforcement mechanisms. On the other hand, there is a wide offer of policy languages that have been developed to date =-=[5, 6, 7, 8, 9]-=-, addressing the general requirements for a Semantic Web policy language: expressiveness, simplicity, enforceability, scalability, and analyzability [10]. These policies can be exchanged between entit...

Citation Context

... trust based on parties’ properties (trust management policies) [2]. Distributed access control has addressed some of these issues though not solved them yet. Examples like KeyNote [3] or PolicyMaker =-=[4]-=- provide a separation between enforcement and decision mechanisms by means of policies. However, policies are bound to public keys (identities) and are not expressive enough to deal with Semantic Web ...

Citation Context

...uage, and only describes purpose for the gathered data) and it does not allow for enforcement mechanisms. On the other hand, there is a wide offer of policy languages that have been developed to date =-=[5, 6, 7, 8, 9]-=-, addressing the general requirements for a Semantic Web policy language: expressiveness, simplicity, enforceability, scalability, and analyzability [10]. These policies can be exchanged between entit...

Citation Context

...uage, and only describes purpose for the gathered data) and it does not allow for enforcement mechanisms. On the other hand, there is a wide offer of policy languages that have been developed to date =-=[5, 6, 7, 8, 9]-=-, addressing the general requirements for a Semantic Web policy language: expressiveness, simplicity, enforceability, scalability, and analyzability [10]. These policies can be exchanged between entit...

Citation Context

...ies from two different entities are compatible or not consists in gathering the relevant policies (and possibly relevant credentials) from the involved entities and checking whether they match (e.g., =-=[11]-=-). On the other hand, if policies may be private (typical situation for business rules [12]), it implies that not all policies are known in advance but they may be disclosed at a later stage. Therefor...

Citation Context

...ased security, privacy and trust on the Semantic Web and does not deal with approaches based on individual trust ratings and propagation through a web of trust providing means to rate unknown sources =-=[15, 16, 17]-=-. 2 Policy Based Interaction and Evaluation Policies allow for security and privacy descriptions in a machine understandable way. More specifically, service or information providers may use security p...

Citation Context

...licies (and possibly relevant credentials) from the involved entities and checking whether they match (e.g., [11]). On the other hand, if policies may be private (typical situation for business rules =-=[12]-=-), it implies that not all policies are known in advance but they may be disclosed at a later stage. Therefore, a negotiation protocol in which security and trust is iteratively established is require...

Citation Context

...es that have been developed to date [5, 6, 7, 8, 9], addressing the general requirements for a Semantic Web policy language: expressiveness, simplicity, enforceability, scalability, and analyzability =-=[10]-=-. These policies can be exchanged between entities on the Semantic Web and therefore they are described using languages with well-founded semantics. The policy languages listed above differ in express...

Citation Context

... maintaining a large number of them is even harder. Fortunately, ontologies and policy reasoning may help users and administrators on specification, conflict detection and resolution of such policies =-=[5, 14]-=-. This chapter first describes how policies are exchanged and how they interact among parties on the Semantic Web, with a brief description of the main Semantic Web policy languages and how ontologies...