{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T07:19:08Z","timestamp":1782371948296,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,7,8]]},"DOI":"10.1145\/3734436.3734447","type":"proceedings-article","created":{"date-parts":[[2025,7,3]],"date-time":"2025-07-03T17:32:44Z","timestamp":1751563964000},"page":"157-168","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Extraction of Machine Enforceable ABAC Policies from Natural Language Text using LLM Knowledge Distillation"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1987-7377","authenticated-orcid":false,"given":"Mian","family":"Yang","sequence":"first","affiliation":[{"name":"Rutgers University, Newark, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2068-780X","authenticated-orcid":false,"given":"Vijayalakshmi","family":"Atluri","sequence":"additional","affiliation":[{"name":"Rutgers University, Newark, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4315-7329","authenticated-orcid":false,"given":"Shamik","family":"Sural","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Kharagpur, Kharagpur, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1499-5558","authenticated-orcid":false,"given":"Ashish","family":"Kundu","sequence":"additional","affiliation":[{"name":"Cisco Research, San Jose, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,7,7]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"crossref","unstructured":"Fabiano Dalpiaz Ivor van der Schalk and Garm Lucassen. 2018. Pinpointing Ambiguity and Incompleteness in Requirements Engineering via Information Visualization and NLP. In Requirements Engineering: Foundation for Software Quality Erik Kamsties Jennifer Horkoff and Fabiano Dalpiaz (Eds.). 119--135.","DOI":"10.1007\/978-3-319-77243-1_8"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-021-01453-z"},{"key":"e_1_3_2_1_3_1","volume-title":"Access Control Policy Generation from User Stories Using Machine Learning","author":"Heaps John","unstructured":"John Heaps, Ram Krishnan, Yufei Huang, Jianwei Niu, and Ravi Sandhu. 2021. Access Control Policy Generation from User Stories Using Machine Learning. In Data and Applications Security and Privacy XXXV, Ken Barker and Kambiz Ghazinour (Eds.). Springer International Publishing, Cham, 171--188."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"Cheng-Yu Hsieh Chun-Liang Li Chih-Kuan Yeh Hootan Nakhost Yasuhisa Fujii Alexander Ratner Ranjay Krishna Chen-Yu Lee and Tomas Pfister. 2023. Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizes. arXiv:2305.02301 [cs.CL] https:\/\/arxiv.org\/abs\/2305.02301","DOI":"10.18653\/v1\/2023.findings-acl.507"},{"key":"e_1_3_2_1_5_1","volume-title":"Scarfone","author":"Hu Vincent","year":"2019","unstructured":"Vincent Hu, David Ferraiolo, Richard Kuhn, Adam Schnitzer, Kenneth Sandlin, Robert Miller, and Karen A. Scarfone. 2019. Guide to Attribute Based Access Control (ABAC) Definition and Considerations. (2019)."},{"key":"e_1_3_2_1_6_1","volume-title":"Nalin Asanka Gamagedara Arachchilage, and Giovanni Russello","author":"Jayasundara Sakuna Harinda","year":"2024","unstructured":"Sakuna Harinda Jayasundara, Nalin Asanka Gamagedara Arachchilage, and Giovanni Russello. 2024. RAGent: Retrieval-based Access Control Policy Generation. arXiv:2409.07489 [cs.CR] https:\/\/arxiv.org\/abs\/2409.07489"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (IEEE TPS '24)","author":"Lawal Sherifdeen","year":"2024","unstructured":"Sherifdeen Lawal, Xingmeng Zhao, Anthony Rios, Ram Krishnan, and David Ferraiolo. 2024. Translating Natural Language Specifications into Access Control Policies by Leveraging Large Language Models. In Proceedings of the IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (IEEE TPS '24) (Washington D.C., USA)."},{"key":"e_1_3_2_1_8_1","volume-title":"Identification of Access Control Policy Sentences from Natural Language Policy Documents","author":"Narouei Masoud","unstructured":"Masoud Narouei, Hamed Khanpour, and Hassan Takabi. 2017. Identification of Access Control Policy Sentences from Natural Language Policy Documents. In Data and Applications Security and Privacy XXXI. Springer International Publishing, Cham, 82--100."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3078861.3078874"},{"key":"e_1_3_2_1_10_1","volume-title":"Automatic Top-Down Role Engineering Framework Using Natural Language Processing Techniques. In IFIP International Conference on Information Security Theory and Practice. Springer, 137--152","author":"Narouei Masoud","year":"2015","unstructured":"Masoud Narouei and Hassan Takabi. 2015. Automatic Top-Down Role Engineering Framework Using Natural Language Processing Techniques. In IFIP International Conference on Information Security Theory and Practice. Springer, 137--152."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2752952.2752958"},{"key":"e_1_3_2_1_12_1","first-page":"506","article-title":"Automatic Extraction of Access Control Policies from Natural Language Documents","volume":"17","author":"Narouei Masoud","year":"2018","unstructured":"Masoud Narouei, Hassan Takabi, and Rodney Nielsen. 2018. Automatic Extraction of Access Control Policies from Natural Language Documents. IEEE Transactions on Dependable and Secure Computing 17, 3 (2018), 506--517.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"e_1_3_2_1_13_1","volume-title":"Liu","author":"Raffel Colin","year":"2023","unstructured":"Colin Raffel, Noam Shazeer, Adam Roberts, Katherine Lee, Sharan Narang, Michael Matena, Yanqi Zhou, Wei Li, and Peter J. Liu. 2023. Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformer. arXiv:1910.10683 [cs.LG] https:\/\/arxiv.org\/abs\/1910.10683"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/POLICY.2012.16"},{"key":"e_1_3_2_1_15_1","volume-title":"2013 International Conference on Social Computing. IEEE, 435--440","author":"Slankas John","year":"2013","unstructured":"John Slankas and Laurie Williams. 2013. Access control policy extraction from unconstrained natural language text. In 2013 International Conference on Social Computing. IEEE, 435--440."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664280"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3532105.3535021"},{"key":"e_1_3_2_1_18_1","volume-title":"Hoi","author":"Wang Yue","year":"2021","unstructured":"Yue Wang, Weishi Wang, Shafiq Joty, and Steven C. H. Hoi. 2021. CodeT5: Identifier-aware Unified Pre-trained Encoder-Decoder Models for Code Understanding and Generation. arXiv:2109.00859 [cs.CL] https:\/\/arxiv.org\/abs\/2109. 00859"},{"key":"e_1_3_2_1_19_1","volume-title":"2022 IEEE International Conference on Bioinformatics and Biomedicine (BIBM). 1289--1296","author":"Xia Yutang","year":"2022","unstructured":"Yutang Xia, Shengfang Zhai, Qinting Wang, Huiting Hou, Zhonghai Wu, and Qingni Shen. 2022. Automated Extraction of ABAC Policies from Natural- Language Documents in Healthcare Systems. In 2022 IEEE International Conference on Bioinformatics and Biomedicine (BIBM). 1289--1296. doi:10.1109\/ BIBM55620.2022.9995559"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2393596.2393608"},{"key":"e_1_3_2_1_21_1","unstructured":"Xiaohan Xu Ming Li Chongyang Tao Tao Shen Reynold Cheng Jinyang Li Can Xu Dacheng Tao and Tianyi Zhou. 2024. A Survey on Knowledge Distillation of Large Language Models. https:\/\/arxiv.org\/abs\/2402.13116"},{"key":"e_1_3_2_1_22_1","article-title":"Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyond","volume":"18","author":"Yang Jingfeng","year":"2024","unstructured":"Jingfeng Yang, Hongye Jin, Ruixiang Tang, Xiaotian Han, Qizhang Feng, Haoming Jiang, Shaochen Zhong, Bing Yin, and Xia Hu. 2024. Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyond. ACM Trans. Knowl. Discov. Data 18, 6, Article 160 (apr 2024), 32 pages.","journal-title":"ACM Trans. Knowl. Discov. Data"},{"key":"e_1_3_2_1_23_1","volume-title":"Automated Privacy Policy Analysis using Large Language Models","author":"Yang Mian","unstructured":"Mian Yang, Vijayalakshmi Atluri, Shamik Sural, and Ashish Kundu. 2025. Automated Privacy Policy Analysis using Large Language Models. In Data and Applications Security and Privacy XXXIX. Springer Nature Switzerland, Cham."},{"key":"e_1_3_2_1_24_1","volume-title":"A Graph-Based Framework for ABAC Policy Enforcement and Analysis","author":"Yang Mian","unstructured":"Mian Yang, Vijayalakshmi Atluri, Shamik Sural, and Jaideep Vaidya. 2024. A Graph-Based Framework for ABAC Policy Enforcement and Analysis. In Data and Applications Security and Privacy XXXVIII. Springer Nature Switzerland, Cham, 3--23."},{"key":"e_1_3_2_1_25_1","volume-title":"Alpa: Automating Inter- and Intra-Operator Parallelism for Distributed Deep Learning. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22)","author":"Zheng Lianmin","year":"2022","unstructured":"Lianmin Zheng, Zhuohan Li, Hao Zhang, Yonghao Zhuang, Zhifeng Chen, Yanping Huang, Yida Wang, Yuanzhong Xu, Danyang Zhuo, Eric P. Xing, Joseph E. Gonzalez, and Ion Stoica. 2022. Alpa: Automating Inter- and Intra-Operator Parallelism for Distributed Deep Learning. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22). USENIX Association, Carlsbad, CA, 559--578."}],"event":{"name":"SACMAT '25:SACMAT '25","location":"Stony Brook NY USA","sponsor":["sigsac ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 30th ACM Symposium on Access Control Models and Technologies"],"original-title":[],"deposited":{"date-parts":[[2025,7,3]],"date-time":"2025-07-03T17:33:41Z","timestamp":1751564021000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3734436.3734447"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,7]]},"references-count":25,"alternative-id":["10.1145\/3734436.3734447","10.1145\/3734436"],"URL":"https:\/\/doi.org\/10.1145\/3734436.3734447","relation":{},"subject":[],"published":{"date-parts":[[2025,7,7]]},"assertion":[{"value":"2025-07-07","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}