Extraction of Machine Enforceable ABAC Policies from Natural Language Text using LLM Knowledge Distillation
Mian Yang, Vijayalakshmi Atluri, Shamik Sural, Ashish Kundu · 2025
Natural Language Access Control Policies (NLACPs) define who can access specific information within an organization and under what conditions. While these policies are typically written in semi-formal or informal natural language, making them easily interpretable by humans, they cannot be directly enforced by access control systems. Their unstructured nature introduces ambiguities and inconsistencies, making automated extraction and translation into structured, machine-enforceable security rules a significant challenge.