SoK: Access Control Policy Generation from High-level Natural Language Requirements
Not on the map. Why?
Abstract (arXiv)
Administrator-centered access control failures can cause data breaches, putting organizations at risk of financial loss and reputation damage. Existing graphical policy configuration tools and automated policy generation frameworks attempt to help administrators configure and generate access control policies by avoiding such failures. However, graphical policy configuration tools are prone to human errors, making them unusable. On the other hand, automated policy generation frameworks are prone to erroneous predictions, making them unreliable. Therefore, to find ways to improve their usability and reliability, we conducted a Systematic Literature Review analyzing 49 publications, to identify those tools, frameworks, and their limitations. Identifying those limitations will help develop effective access control policy generation solutions while avoiding access control failures.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 14 of its 116 references that are in the map. First posted on arXiv 5 Oct 2023.
Builds on
14 of 116 references.
References · 14
- 2017Attention Is All You Needcited by 60,361
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,236
- 2019Simple BERT Models for Relation Extraction and Semantic Role Labelingcited by 154
- 2023Unveiling Security, Privacy, and Ethical Concerns of ChatGPTcited by 53
- 2018Neural Open Information Extractioncited by 50
- 2018Explainable Securitycited by 15
- 2020A Survey of Syntactic-Semantic Parsing Based on Constituent and Dependency Structurescited by 7
2 more
Built on by
Citing papers per year: 2024: 1; 2025: 2; 2026: 2.
5 papers.
- 2024RAGent: Retrieval-based Access Control Policy Generationcited by 5
- 2026Prose2Policy (P2P): A Practical LLM Pipeline for Translating Natural-Language Access Policies into Executable Regocited by 1
- 2025LLM-Driven Auto Configuration for Transient IoT Device Collaborationcited by 0
- 2025Neurosymbolic Characterization for Reliable Access Control Policy Analysiscited by 0
- 2026Structured Decomposition for Reliable LLM-Generated Access Control Policiescited by 0
- 2026Structured Decomposition for Reliable LLM-Generated Access Control Policies21 Sep 2026
- 2026Prose2Policy (P2P): A Practical LLM Pipeline for Translating Natural-Language Access Policies into Executable Rego16 Mar 2026
- 2025Neurosymbolic Characterization for Reliable Access Control Policy Analysis23 Oct 2025
- 2025LLM-Driven Auto Configuration for Transient IoT Device Collaboration3 Jul 2025
- 2024RAGent: Retrieval-based Access Control Policy Generation8 Sep 2024