Access control validation by ontologies

Abstract

The aim of this paper is to show how we can automatically extract access control information from Windows and Linux devices in order to analyze them in an automatic way by using ontologies. The extracted data related to access control are used to instantiate a defined ontology. After that, some reasoning engines are used to query the ontology in order to understand the implemented security policy or to compare it with an expected one.