Risk-aware access control systems grant or deny access to resources based on the notion of
risk. It has many advantages compared to classical approaches, allowing for more flexibility,
and ultimately supporting for a better exploitation of data. The authors propose and
demonstrate a risk-aware access control framework for information disclosure, which
supports run-time risk assessment. In their framework access-control decisions are based on
the disclosure-risk associated with a data access request and, differently from existing …

Risk-aware access control systems grant or deny access to resources based on the notion of
risk. It has many advantages compared to classical approaches, allowing for more flexibility,
and ultimately supporting for a better exploitation of data. The authors propose and
demonstrate a risk-aware access control framework for information disclosure, which
supports run-time risk assessment. In their framework access-control decisions are based on
the disclosure-risk associated with a data access request and, differently from existing …