This paper describes a Scratch-based eXtensible Access Control Markup Language XACML editor ViSPE that can be used for designing authorisation and anonymisation policies, as well as how these policies can be enforced by using the Reversible anonymiser. Private and confidential information can be protected based on identified security requirements, as described in two case studies. The first case covers privacy-enhanced IDS-alarm handling in a traffic control centre, and in the second case, we mitigate insider threats with a secure configuration deployment policy.
['Nils Ulltveit-Moe', 'Henrik Nergaard', 'Terje Gjøsæter', 'Jennifer Betts']
XACML Privacy Policy Editor for Critical Infrastructures