Leveraging Large Language Models for Automated Access Policies Generation: An Agentware Approach

Large language models (LLMs) are probably the most popular type of foundation models (FMs) today. The growing adoption of conversational tools such as ChatGPT offers new solutions for software development challenges and opens new scenarios in which FMs can be employed to autonomously perform specialized tasks within a software architecture (the “agentware” paradigm). If properly trained or instructed, FMs can produce code even for highly specialized tasks, thus benefiting small companies which may be lacking specific domain experts. Integrating FMs in software design, on the other hand, introduces challenges that must be addressed. In this paper we present a software architecture employing agentware for automating XACML access control policy generation. We build on a prototype pipeline to propose an effective integration of agents into a software system. We will show that our design allows for optimal use of the generative power of FMs while tackling their intrinsic limitations.

Authors

Institutions

Publication Details

Journal
IEEE Software
Published
2025-10-02
DOI
https://doi.org/10.1109/ms.2025.3617078
Primary Topic
Access Control and Trust
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Leveraging Large Language Models for Automated Access Policies Generation: An Agentware Approach

Eda Marchetti, Maria Teresa Paratore, Gianluca Trentanni, Antonello Calabrò
IEEE Software
Access Control and Trust
article

Leveraging Large Language Models for Automated Access Policies Generation: An Agentware Approach

Eda Marchetti, Maria Teresa Paratore, Gianluca Trentanni, Antonello Calabrò
article en

Abstract

Large language models (LLMs) are probably the most popular type of foundation models (FMs) today. The growing adoption of conversational tools such as ChatGPT offers new solutions for software development challenges and opens new scenarios in which FMs can be employed to autonomously perform specialized tasks within a software architecture (the “agentware” paradigm). If properly trained or instructed, FMs can produce code even for highly specialized tasks, thus benefiting small companies which may be lacking specific domain experts. Integrating FMs in software design, on the other hand, introduces challenges that must be addressed. In this paper we present a software architecture employing agentware for automating XACML access control policy generation. We build on a prototype pipeline to propose an effective integration of agents into a software system. We will show that our design allows for optimal use of the generative power of FMs while tackling their intrinsic limitations.

IEEE SoftwareVol. 43(1)
Istituto di Scienza e Tecnologie dell'Informazione "Alessandro Faedo" (IT), Azienda Sanitaria Locale Alessandria (IT)
Openalex Percentile: Top 64%
Access Control and Trust
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.