1. Enabling Access to WebEnabling Access to Web Resources throughResources through SecPODE-based AnnotationsSecPODE-based Annotations Quentin Reul, and Gang Zhao

2. SWWS 2010 2 Overview Motivation Background What is an ontology? DOGMA SecPODE Ontology Application Conclusion 3. Motivation SWWS 2010 3 4. SWWS 2010 4 Ontology-based Interoperability Traditional SysA SysC SysB SysD SysE SysA SysC SysB SysD SysE 5. SWWS 2010 5 What is an ontology? An ontology is a server-stored shared agreement on the semantics of data, processes and rules in a given domain. It enables concepts to be: Unambigous Findable Interoperable Modular/reusable 6. DOGMA SWWS 2010 6 7. SWWS 2010 7 SecPODE Ontology (I) Declarative rather than procedural Extended to express specific types of security policies (e.g. access control policies). 8. SWWS 2010 8 SecPODE Ontology (II) 9. SWWS 2010 9 Condition 10. SWWS 2010 10 Action 11. SWWS 2010 11 Target 12. SWWS 2010 12 Access Control Policy 13. SWWS 2010 13 ABAC Policy 14. Access Control Policy Interoperability (I) SWWS 2010 14 15. Access Control Policy Interoperability (II) SWWS 2010 15 16. SWWS 2010 16 Conclusion Developed an ontology of Security Policies Showed how this ontology could be used to enable interoperability 17. SWWS 2010 17 DOGMA Reference Spyns, P., Tang, Y., Meersman, R.: An Ontology Engineering Methodology for DOGMA. In Journal of Applied Ontology, 3:13-39, 2008 Spyns, P., Meersman, R., Jarrar, M.: Data modelling versus ontology engineering. SIGMOD Record Special Issue on Semantic Web, Database Management and Information Systems 31(4):12-17, 2002 de Moor, A., De Leenheer, P., Meersman, R.: DOGMA- MESS: A meaning evolution support system for interorganizational ontology engineering. In: Proc. of the 14th International Conference on Conceptual Structures, (ICCS 2006), Aalborg, Denmark.