6533b7dbfe1ef96bd126ff4d

RESEARCH PRODUCT

ViSPE: A Graphical Policy Editor for XACML

Nils Ulltveit-moeTerje GjøsæterHenrik Nergaard

subject

Structure (mathematical logic)Markup languageSyntax (programming languages)Computer sciencebusiness.industryProgramming languageXACMLAccess controlSecurity policycomputer.software_genreBlock (programming)businesscomputerSmalltalkcomputer.programming_language

description

In this paper we present the Visual Security Policy Editor (ViSPE), a policy-maker-friendly graphical editor for the eXtensible Access Control Markup Language (XACML). The editor is based on the programming language Scratch and implemented in Smalltalk. It uses a graphical block-based syntax for declaring access control polices that simplifies many of the cumbersome and verbose parts of XACML. Using a graphical language allows the editor to aid the policy-maker in building polices by providing visual feedback and by grouping blocks and operators that fit together and also indicating which blocks that stick together. It simplifies building policies while still maintaining the basic structure and logic of XACML.

https://doi.org/10.1007/978-3-319-27668-7_7