Policy Management for the Web
News |
Papers & Proceedings now available. Paper submission deadline extended to 14 Feb. 2/2 Daniel Weitzner to give invited talk on transparency and policy. 12/3 |
12-Dec-04
In order to realize the full potential of the World Wide Web as an open, dynamic, and distributed ``universe of network-accessible information'', it is important for web entities to behave appropriately. Policy management provides the openness, flexibility, and autonomy required to regulate this environment as entities can reason over their own policies and the policies of other entities to decide how to behave. Using policies also allows entities to specify expected behavior of entities they interact with. Entities can also adapt to increasingly complex requirements without the need for substantial changes to the structure or implementation through the use of policies.
Policy management includes policy specification, deployment, reasoning over policies, updating and maintaining policies, and enforcement. We propose that policy management is required for the web for (i) constraining different kinds of behavior including security, privacy, conversation, and collaboration, (ii) configuration management, (iii) describing business processes, and (iv) establishing trust and reputation.
Topics of Interest
- Policy specification, implementation, and enforcement
- Dynamic merging of policies
- Static and dynamic conflict resolution
- Dynamic policy modification
- Formal models for policy verification
- Relationship of trust and reputation to policies
- Business contracts and rules
- Case studies for policy management
- Applicability of XML, RDF and OWL for policy specification
- Obligation management
- Policies for access control, privacy, and collaboration
- Decidability and tractability issues
- Digital Rights Management policies
- Policy engineering
- Enhancing P3P with policies
- User-oriented policy authoring systems