{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,23]],"date-time":"2026-02-23T13:20:20Z","timestamp":1771852820341,"version":"3.50.1"},"reference-count":37,"publisher":"MDPI AG","issue":"18","license":[{"start":{"date-parts":[[2023,9,16]],"date-time":"2023-09-16T00:00:00Z","timestamp":1694822400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Basic and Applied Basic Research Fund of Guangdong Province","award":["2022A1515140096"],"award-info":[{"award-number":["2022A1515140096"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Access Control Policies (ACPs) are essential for ensuring secure and authorized access to resources in IoT networks. Recognizing these policies involves identifying relevant statements within project documents expressed in natural language. While current research focuses on improving recognition accuracy through algorithm enhancements, the challenge of limited labeled data from individual clients is often overlooked, which impedes the training of highly accurate models. To address this issue and harness the potential of IoT networks, this paper presents FL-Bert-BiLSTM, a novel model that combines federated learning and pre-trained word embedding techniques for access control policy recognition. By leveraging the capabilities of IoT networks, the proposed model enables real-time and distributed training on IoT devices, effectively mitigating the scarcity of labeled data and enhancing accessibility for IoT applications. Additionally, the model incorporates pre-trained word embeddings to leverage the semantic information embedded in textual data, resulting in improved accuracy for access control policy recognition. Experimental results substantiate that the proposed model not only enhances accuracy and generalization capability but also preserves data privacy, making it well-suited for secure and efficient access control in IoT networks.<\/jats:p>","DOI":"10.3390\/s23187935","type":"journal-article","created":{"date-parts":[[2023,9,17]],"date-time":"2023-09-17T23:57:46Z","timestamp":1694995066000},"page":"7935","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Statement Recognition of Access Control Policies in IoT Networks"],"prefix":"10.3390","volume":"23","author":[{"given":"Li","family":"Ma","sequence":"first","affiliation":[{"name":"School of Electronic Information Engineering, Foshan University, Foshan 528000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6060-7603","authenticated-orcid":false,"given":"Zexian","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Electronic Information Engineering, Foshan University, Foshan 528000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-9710-1595","authenticated-orcid":false,"given":"Zhaoxiong","family":"Bu","sequence":"additional","affiliation":[{"name":"School of Electronic Information Engineering, Foshan University, Foshan 528000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1448-3624","authenticated-orcid":false,"given":"Qidi","family":"Lao","sequence":"additional","affiliation":[{"name":"School of Electronic Information Engineering, Foshan University, Foshan 528000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4842-9060","authenticated-orcid":false,"given":"Wenyin","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Electronic Information Engineering, Foshan University, Foshan 528000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,9,16]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"100467","DOI":"10.1016\/j.cosrev.2022.100467","article-title":"Landscape of IoT Security","volume":"44","author":"Schiller","year":"2022","journal-title":"Comput. Sci. Rev."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Sadhu, P.K., Yanambaka, V.P., and Abdelgawad, A. (2022). Internet of Things: Security and Solutions Survey. Sensors, 22.","DOI":"10.3390\/s22197433"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"65","DOI":"10.1145\/3007204","article-title":"Current Research and Open Problems in Attribute-Based Access Control","volume":"49","author":"Servos","year":"2017","journal-title":"ACM Comput. Surv."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Ragothaman, K., Wang, Y., Rimal, B., and Lawrence, M. (2023). Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions. Sensors, 23.","DOI":"10.3390\/s23041805"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"60","DOI":"10.1504\/IJSN.2021.112837","article-title":"A Survey on Access Control in IoT: Models, Architectures and Research Opportunities","volume":"16","author":"Alnefaie","year":"2021","journal-title":"Int. J. Secur. Netw."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"4682","DOI":"10.1109\/JIOT.2020.2969326","article-title":"A Survey on Access Control in the Age of Internet of Things","volume":"7","author":"Qiu","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_7","first-page":"138","article-title":"Centralized, Distributed, and Everything in between: Reviewing Access Control Solutions for the IoT","volume":"54","author":"Laurent","year":"2021","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"317","DOI":"10.1016\/j.cose.2018.09.011","article-title":"Greedy and Evolutionary Algorithms for Mining Relationship-Based Access Control Policies","volume":"80","author":"Bui","year":"2019","journal-title":"Comput. Secur."},{"key":"ref_9","first-page":"1","article-title":"Guide to Attribute Based Access Control (ABAC) Definition and Considerations (Draft)","volume":"800","author":"Hu","year":"2013","journal-title":"NIST Spec. Publ."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Shi, L., and Chadwick, D. (2011, January 21\u201324). A Controlled Natural Language Interface for Authoring Access Control Policies. Proceedings of the 2011 ACM Symposium on Applied Computing, TaiChung, Taiwan.","DOI":"10.1145\/1982185.1982510"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1493","DOI":"10.1016\/j.jcss.2014.04.017","article-title":"Building Access Control Policy Model for Privacy Preserving and Testing Policy Conflicting Problems","volume":"80","author":"Wang","year":"2014","journal-title":"J. Comput. Syst. Sci."},{"key":"ref_12","unstructured":"Ragothaman, K.N.M., and Wang, Y. (2021, January 5). A Systematic Mapping Study of Access Control in the Internet of Things. Proceedings of the 54th Hawaii International Conference on System Sciences, Kauai, HI, USA."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1109\/IOTM.004.2100182","article-title":"Federated Learning for the Internet of Things: Applications, Challenges, and Opportunities","volume":"5","author":"Zhang","year":"2022","journal-title":"IEEE Internet Things Mag."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"1622","DOI":"10.1109\/COMST.2021.3075439","article-title":"Federated Learning for Internet of Things: A Comprehensive Survey","volume":"23","author":"Nguyen","year":"2021","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1759","DOI":"10.1109\/COMST.2021.3090430","article-title":"Federated Learning for Internet of Things: Recent Advances, Taxonomy, and Open Challenges","volume":"23","author":"Khan","year":"2021","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_16","first-page":"12","article-title":"Federated Machine Learning: Concept and Applications","volume":"10","author":"Yang","year":"2019","journal-title":"ACM Trans. Intell. Syst. Technol. (TIST)"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Nobi, M.N., Krishnan, R., Huang, Y., Shakarami, M., and Sandhu, R. (2022, January 24\u201327). Toward Deep Learning Based Access Control. Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy, Baltimore, MD, USA.","DOI":"10.1145\/3508398.3511497"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"993","DOI":"10.1016\/j.infsof.2008.11.005","article-title":"Requirements-Based Access Control Analysis and Policy Specification (ReCAPS)","volume":"51","author":"He","year":"2009","journal-title":"Inf. Softw. Technol."},{"key":"ref_19","unstructured":"Schwitter, R. (2010). Coling 2010: Posters, Proceedings of the Coling 2010 Organizing Committee, Beijing, China, 23\u201327 August 2010, Coling 2010 Organizing Committee."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Xiao, X., Paradkar, A., Thummalapenta, S., and Xie, T. (2012, January 11\u201316). Automated Extraction of Security Policies from Natural-Language Software Documents. Proceedings of the ACM SIGSOFT 20th International Symposium on the Foundations of Software Engineering, Cary, NC, USA.","DOI":"10.1145\/2393596.2393608"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Slankas, J., Xiao, X., Williams, L., and Xie, T. (2014, January 8\u201312). Relation Extraction for Inferring Access Control Rules from Natural Language Artifacts. Proceedings of the 30th Annual Computer Security Applications Conference, New Orleans, LA, USA.","DOI":"10.1145\/2664243.2664280"},{"key":"ref_22","first-page":"145","article-title":"Access Control Policy Identification and Extraction from Project Documentation","volume":"2","author":"Slankas","year":"2013","journal-title":"Science"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"137","DOI":"10.1007\/978-3-319-24018-3_9","article-title":"Automatic Top-Down Role Engineering Framework Using Natural Language Processing Techniques","volume":"Volume 9311","author":"Akram","year":"2015","journal-title":"Information Security Theory and Practice"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Narouei, M., and Takabi, H. (2015, January 1\u20133). Towards an Automatic Top-down Role Engineering Approach Using Natural Language Processing Techniques. Proceedings of the 20th ACM Symposium on Access Control Models and Technologies, Vienna, Austria.","DOI":"10.1145\/2752952.2752958"},{"key":"ref_25","unstructured":"Livraga, G., and Zhu, S. (2017, January 19\u201321). Identification of Access Control Policy Sentences from Natural Language Policy Documents. Proceedings of the Data and Applications Security and Privacy XXXI, Philadelphia, PA, USA."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Narouei, M., Khanpour, H., Takabi, H., Parde, N., and Nielsen, R. (2017, January 13\u201315). Towards a Top-down Policy Engineering Framework for Attribute-Based Access Control. Proceedings of the 22nd ACM on Symposium on Access Control Models and Technologies, Indianapolis, IN, USA.","DOI":"10.1145\/3078861.3078874"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Alohaly, M., Takabi, H., and Blanco, E. (2018, January 7). A Deep Learning Approach for Extracting Attributes of ABAC Policies. Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies, New York, NY, USA.","DOI":"10.1145\/3205977.3205984"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1186\/s42400-018-0019-2","article-title":"Automated Extraction of Attributes from Natural Language Attribute-Based Access Control (ABAC) Policies","volume":"2","author":"Alohaly","year":"2019","journal-title":"Cybersecur"},{"key":"ref_29","unstructured":"McMahan, B., Moore, E., Ramage, D., Hampson, S., and y Arcas, B.A. (2017, January 20\u201322). Communication-Efficient Learning of Deep Networks from Decentralized Data. Proceedings of the Artificial intelligence and statistics, PMLR, Fort Lauderdale, FL, USA."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1561\/2200000083","article-title":"Advances and Open Problems in Federated Learning","volume":"14","author":"Kairouz","year":"2021","journal-title":"FNT Mach. Learn."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"717","DOI":"10.1007\/s00607-019-00768-7","article-title":"A Survey of Word Embeddings Based on Deep Learning","volume":"102","author":"Wang","year":"2020","journal-title":"Computing"},{"key":"ref_32","unstructured":"Devlin, J., Chang, M.-W., Lee, K., and Toutanova, K. (2018). Bert: Pre-Training of Deep Bidirectional Transformers for Language Understanding. arXiv."},{"key":"ref_33","first-page":"5999","article-title":"Attention Is All You Need","volume":"30","author":"Vaswani","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"132306","DOI":"10.1016\/j.physd.2019.132306","article-title":"Fundamentals of Recurrent Neural Network (RNN) and Long Short-Term Memory (LSTM) Network","volume":"404","author":"Sherstinsky","year":"2020","journal-title":"Phys. D Nonlinear Phenom."},{"key":"ref_35","first-page":"10","article-title":"The Eu General Data Protection Regulation (Gdpr)","volume":"Volume 10","author":"Voigt","year":"2017","journal-title":"A Practical Guide"},{"key":"ref_36","first-page":"19332","article-title":"Federated Learning from Pre-Trained Models: A Contrastive Learning Approach","volume":"35","author":"Tan","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"8229","DOI":"10.1109\/JIOT.2022.3150363","article-title":"Recent Advances on Federated Learning for Cybersecurity and Cybersecurity for Federated Learning for Internet of Things","volume":"9","author":"Ghimire","year":"2022","journal-title":"IEEE Internet Things J."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/18\/7935\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T20:52:14Z","timestamp":1760129534000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/18\/7935"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9,16]]},"references-count":37,"journal-issue":{"issue":"18","published-online":{"date-parts":[[2023,9]]}},"alternative-id":["s23187935"],"URL":"https:\/\/doi.org\/10.3390\/s23187935","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,9,16]]}}}