Security and Privacy Policy Languages: A Survey, Categorization and Gap Identification

TL;DR

This paper surveys 27 security and privacy policy languages, categorizes them within a framework, identifies gaps, and advocates for policy languages to specify privacy-utility trade-offs.

Contribution

It provides a comprehensive categorization framework for policy languages and highlights gaps and future research directions.

Findings

Current policy languages are mapped within the framework

Identified gaps in existing policy languages

Motivates adoption of policy languages for privacy-utility trade-offs

Abstract

For security and privacy management and enforcement purposes, various policy languages have been presented. We give an overview on 27 security and privacy policy languages and present a categorization framework for policy languages. We show how the current policy languages are represented in the framework and summarize our interpretation. We show up identified gaps and motivate for the adoption of policy languages for the specification of privacy-utility trade-off policies.