Enabling access to web resources through SecPODE-based annotations

Abstract

The annotation of resources with policy metadata enables the enforcement of security and privacy policies in open and distributed environments. In this paper, we present the Security Policy Ontology for Distributed Environment (SecPODE), which is capable of representing different types of security policies. This ontology differs from existing security policy ontology by being grounded in natural language rather than complex paradigms. As a result, SecPODE is both easy to use and intuitive to extend by security experts and data subject alike. Finally, we show how SecPODE can be used to gain access to Web resources. © 2010 Springer-Verlag Berlin Heidelberg.