CHAPTER 23 Policies, Access Control, and Formal Methods Elisa Bertino 23.1. INTRODUCTION The pervasive nature of today's computing infras- tructure makes it possible for organizations and individuals to collect, distribute, and share huge in compliance with the privacy preferences, the legal guidelines, and other relevant policies. In such context, a key security component for assuring data protection is represented by