%L eprints1574 %A Marianne Bush %A Nora Koch %A Massimiliano Masi %A Rosario Pugliese %A Francesco Tiezzi %B Proceedings of 1st International Workshop on Model-Driven Security (MDsec) %X We introduce a UML-based notation for graphically modeling systems? security aspects in a simple and intuitive way and a model-driven process that transforms graphical specifications of access control policies in XACML. These XACML policies are then translated in FACPL, a policy language with a formal semantics, and the resulting policies are evaluated by means of a Java-based software tool. %I Springer %T Towards Model-Driven Development of Access Control Policies for Web Applications %K Security, Model-driven development, Web engineering %D 2012 %N 4 %R 10.1145/2422498.2422502