Paper Info
Title
A comparison of two privacy policy languages: EPAL and XACML
Abstract
Current regulatory requirements in the U.S. and other countries make it increasingly important for Web Services to be able to enforce and verify their compliance with privacy policies. Structured policy languages can play a major role by supporting automated enforcement of policies and auditing of access decisions. This paper compares two policy languages that have been developed for use in expressing directly enforceable privacy policies -- the Enterprise Privacy Authorization Language (EPAL) and the OASIS Standard eXtensible Access Control Markup Language (XACML), together with its standard privacy profile.
Year
DOI
Venue
2006
10.1145/1180367.1180378
SWS
Keywords
Field
DocType
structured policy language,access decision,oasis standard profile,control markup language,policy language,privacy policy language,privacy-specific functionality,xacml,oasis standard,enterprise privacy authorization language,epal,data privacy,enforceable privacy policy,web services,access control,privacy policy,industry functionality,languages diiffer,standard privacy profile,markup language,web service
Computer science,Computer security,Privacy policy,XACML,Enforcement,Access control,Information privacy,Web service,Privacy software,Database,Markup language
Conference
ISBN
Citations 
PageRank 
1-59593-546-0
45
3.28
References 
Authors
14
1
Name
Order
Citations
PageRank
Anne Anderson143858.91