Automated Management and Analysis of security policies using Eclipse

The design of ecient and eective techniques for security policy analysis and management is a crucial open problem in modern information systems. The increasing complexity of current IT systems requires new techniques for designing access control policies. Thus, in order to ease the denition and management of access control policies, a tool chain that lets developers dening and managing security policies is needed. This tool chain can be used to support a model-driven approach to the denition and implementation of access control policies, in which the policies are rened in several steps in order to produce concrete security congurations. In this paper we present an extension of the PoSecCo Eclipse Policy Plug- in (PEPP), which provides to the users three dierent reasoning services for detecting anomalies in security policies. The reasoning services are based on Semantic Web and ontology management technologies, which oer an adequate basis for the realization of techniques able to support conict analysis in security policies. The three services are: (a) Policy