Analysis of XACML policies with ASP

Abstract

Security policy administrators face difficulties to ensure that the policies they specify in XACML correspond to what they intend to formulate and to understand their overall effect. This paper proposes a logic-based XACML3.0 analysis solution using Answer Set Programming (ASP) where Ansprolog is used to model the XACML decision process and an ASP solver is employed in an innovative way to perform logical reasoning on access control policies such as detecting conflicts in a multi-organizational context.