@Misc{xacml,
 author = {{Organization for the Advancement of Structured Information Standards (OASIS)}},
 title  = {{eXtensible Access Control Markup Language (XACML) Version 3.0}},
 month = {January},
 year = {2013},
 note = {{OASIS Standard}},
 howpublished = {\url{https://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.html}},
}



@article{pandit2025,
author = {Harshvardhan J. Pandit and Beatriz Esteves},
title ={Enhancing Data Use Ontology ({DUO}) for health-data sharing by extending it with {ODRL} and {DPV}},
journal = {Semantic Web},
volume = {15},
number = {4},
pages = {1473-1498},
year = {2024},
doi = {10.3233/SW-243583}
}

@InProceedings{pandit2024,
author="J. Pandit, Harshvardhan
and Esteves, Beatriz
and P. Krog, Georg
and Ryan, Paul
and Golpayegani, Delaram
and Flake, Julian",
editor="Demartini, Gianluca
and Hose, Katja
and Acosta, Maribel
and Palmonari, Matteo
and Cheng, Gong
and Skaf-Molli, Hala
and Ferranti, Nicolas
and Hern{\'a}ndez, Daniel
and Hogan, Aidan",
title="{Data Privacy Vocabulary (DPV) -- Version 2.0}",
booktitle="{The Semantic Web -- ISWC 2024}",
year="2025",
publisher="Springer Nature Switzerland",
address="Cham",
pages="171--193"
}

@InProceedings{Slabbinck2025,
author="Slabbinck, Wout
and Rojas Mel{\'e}ndez, Juli{\'a}n
and Esteves, Beatriz
and Colpaert, Pieter
and Verborgh, Ruben",
editor="Curry, Edward
and Acosta, Maribel
and Poveda-Villal{\'o}n, Maria
and van Erp, Marieke
and Ojo, Adegboyega
and Hose, Katja
and Shimizu, Cogan
and Lisena, Pasquale",
title="Interoperable Interpretation and Evaluation of {ODRL} Policies",
booktitle="The Semantic Web",
year="2025",
publisher="Springer Nature Switzerland",
address="Cham",
pages="192--209"
}


@article{Akaichi2025,
title = {A comprehensive review of usage control frameworks},
journal = {Computer Science Review},
volume = {56},
pages = {100698},
year = {2025},
issn = {1574-0137},
doi = {10.1016/j.cosrev.2024.100698},
author = {Ines Akaichi and Sabrina Kirrane}
}



@Misc{odrl-im,
 author = {Renato Iannella and Serena Villata},
 title  = {{ODRL Information Model 2.2}},
 month = {February},
 year = {2018},
 note = {{W3C Recommendation}},
 howpublished = {\url{https://www.w3.org/TR/odrl-model/}},
}


@Misc{odrl-voc,
 author = {Renato Iannella and Michael Steidl and Stuart Myles and Víctor Rodríguez-Doncel},
 title  = {{ODRL Vocabulary \& Expression 2.2}},
 month = {February},
 year = {2018},
 note = {{W3C Recommendation}},
 howpublished = {\url{https://www.w3.org/TR/odrl-vocab/}},
}


@Misc{mapping-dpv-odrl,
 author = {Beatriz Esteves and Harshvardhan J. Pandit},
 title  = {{Mapping from DPV to ODRL}},
 month = {January},
 year = {2025},
 note = {{W3C Draft Community Group Report}},
 howpublished = {\url{https://w3id.org/dpv/mappings/odrl/}},
}



@InProceedings{kebede2021,
author="Kebede, Milen G.
and Sileno, Giovanni
and Van Engers, Tom",
editor="Rodr{\'i}guez-Doncel, V{\'i}ctor
and Palmirani, Monica
and Araszkiewicz, Micha{\l}
and Casanovas, Pompeu
and Pagallo, Ugo
and Sartor, Giovanni",
title="A Critical Reflection on ODRL",
booktitle="AI Approaches to the Complexity of Legal Systems XI-XII",
year="2021",
publisher="Springer International Publishing",
address="Cham",
pages="48--61",
abstract="Rights expression languages (RELs) aim to express and govern legally binding behavior within technological environments. The Open Digital Rights Language (ODRL), used to represent statements about the usage of digital assets, is among the most known RELs today and has become a W3C recommendation to enhance the web's functionality and interoperability. This paper reflects on the representational power of ODRL from a practical perspective; utilizing use cases and examples, we discuss the challenges, issues, and limitations we came across while investigating the language as a potential solution for the regulation of data-sharing infrastructures.",
isbn="978-3-030-89811-3"
}

@Misc{Vanwambeke2023,
 author = {Julien Vanwambeke and Yassir Sellami},
 title  = {{Gaia-X and the Policy Reasoning Engine}},
 month = {December},
 year = {2023},
 howpublished = {\url{https://gaia-x.eu/gaia-x-and-the-policy-reasoning-engine/}},
}


@article{Lawson2021,
title = {The Data Use Ontology to streamline responsible access to human biomedical datasets},
journal = {Cell Genomics},
volume = {1},
number = {2},
pages = {100028},
year = {2021},
issn = {2666-979X},
doi = {10.1016/j.xgen.2021.100028},
author = {Jonathan Lawson and Moran N. Cabili and Giselle Kerry and Tiffany Boughtwood and Adrian Thorogood and Pinar Alper and Sarion R. Bowers and Rebecca R. Boyles and Anthony J. Brookes and Matthew Brush and Tony Burdett and Hayley Clissold and Stacey Donnelly and Stephanie O.M. Dyke and Mallory A. Freeberg and Melissa A. Haendel and Chihiro Hata and Petr Holub and Francis Jeanson and Aina Jene and Minae Kawashima and Shuichi Kawashima and Melissa Konopko and Irene Kyomugisha and Haoyuan Li and Mikael Linden and Laura Lyman Rodriguez and Mizuki Morita and Nicola Mulder and Jean Muller and Satoshi Nagaie and Jamal Nasir and Soichi Ogishima and Vivian {Ota Wang} and Laura D. Paglione and Ravi N. Pandya and Helen Parkinson and Anthony A. Philippakis and Fabian Prasser and Jordi Rambla and Kathy Reinold and Gregory A. Rushton and Andrea Saltzman and Gary Saunders and Heidi J. Sofia and John D. Spalding and Morris A. Swertz and Ilia Tulchinsky and Esther J. {van Enckevort} and Susheel Varma and Craig Voisin and Natsuko Yamamoto and Chisato Yamasaki and Lyndon Zass and Jaime M. {Guidry Auvil} and Tommi H. Nyrönen and Mélanie Courtot},
}


@article{Lioudakis2021, 
title={{GDPR Compliance Made Easier: The BPR4GDPR Project}}, 
author={Lioudakis, Georgios and Papagiannakopoulou, Eugenia and Koukovini, Maria and Dellas, Nikolaos and Kalaboukas, Kostas and Bracciale, Lorenzo and Raso, Emanuele and Bianchi, Giuseppe and Loreti, Pierpaolo and Barracano, Paolo and Alexakis, Spiros and Medeiros de Carvalho, Renata and Hassani, Marwan}, 
volume={1}, 
number={1}, 
journal={ARIS2 - Advanced Research on Information Systems Security}, 
DOI={10.56394/aris2.v1i1.1}, 
year={2021}, 
month={December}, 
pages={5–23} 
}

@phdthesis{koukovini2014phd,
  author       = {Maria N. Koukovini},
  title        = {Inherent privacy awareness in service-oriented architectures},
  school       = {National Technical University of Athens, School of Electrical and Computer Engineering},
  address      = {Athens},
  year         = {2014},
  type         = {Ph.D. thesis}
}


@phdthesis{papagiannakopoulou2014phd,
  author       = {Eugenia I. Papagiannakopoulou},
  title        = {Semantic Access Control Model for Distributed Environments},
  school       = {National Technical University of Athens, School of Electrical and Computer Engineering},
  address      = {Athens},
  year         = {2014},
  type         = {Ph.D. thesis}
}

@article{ferraiolo2001,
 author = {Ferraiolo, David F. and Sandhu, Ravi and Gavrila, Serban and Kuhn, D. Richard and Chandramouli, Ramaswamy},
 title = {Proposed {NIST} standard for {Role-Based Access Control}},
 journal = {ACM Transactions on Information and System Security},
 volume = {4},
 number = {3},
 year = {2001},
 issn = {1094-9224},
 pages = {224--274},
 doi = {10.1145/501978.501980},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@article{bertino1999,
author = {Bertino, Elisa and Ferrari, Elena and Atluri, Vijay},
title = {The specification and enforcement of authorization constraints in workflow management systems},
year = {1999},
issue_date = {Feb. 1999},
publisher = {ACM},
address = {New York, NY, USA},
volume = {2},
number = {1},
issn = {1094-9224},
doi = {10.1145/300830.300837},
journal = {ACM Transactions on Information and System Security},
month = {February},
pages = {65–104}
}


@article{park2004,
author = {Park, Jaehong and Sandhu, Ravi},
title = {The {UCONABC} usage control model},
year = {2004},
issue_date = {February 2004},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {7},
number = {1},
issn = {1094-9224},
doi = {10.1145/984334.984339},
journal = {ACM Transactions on Information and System Security},
month = {February},
pages = {128–174}
}


@article{liu2021,
title = {A novel conflict detection method for {ABAC} security policies},
journal = {Journal of Industrial Information Integration},
volume = {22},
pages = {100200},
year = {2021},
issn = {2452-414X},
doi = {10.1016/j.jii.2021.100200},
author = {Gang Liu and Wenxian Pei and Yumin Tian and Chen Liu and Shancang Li}
}


@inproceedings{shu2009,
author = {Shu, Cheng-chun and Yang, Erica Y. and Arenas, Alvaro E.},
title = {Detecting conflicts in {ABAC} policies with rule-reduction and binary-search techniques},
year = {2009},
isbn = {9781424446704},
publisher = {IEEE Press},
booktitle = {Proceedings of the 10th IEEE International Conference on Policies for Distributed Systems and Networks},
pages = {182–185},
numpages = {4},
location = {London, United Kingdom},
series = {POLICY'09}
}


@Misc{eu-strategy-for-data,
 author = {{European Commission}},
 title  = {{A European strategy for data}},
 month = {February},
 year = {2020},
 note = {{COM(2020) 66 final}},
 howpublished = {\url{https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52020DC0066}}
}

@Misc{eu-dga,
 author = {{European Parliament and Council}},
 title  = {{Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance and amending Regulation (EU) 2018/1724 (Data Governance Act)}},
 month = {May},
 year = {2022},
 note = {{Official Journal of the European Union L 152}},
 howpublished = {\url{http://data.europa.eu/eli/reg/2022/868/oj}}
}

@Misc{eu-data-act,
 author = {{European Parliament and Council}},
 title  = {{Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data and amending Regulation (EU) 2017/2394 and Directive (EU) 2020/1828 (Data Act)}},
 month = {December},
 year = {2023},
 note = {{Official Journal of the European Union Series L}},
 howpublished = {\url{http://data.europa.eu/eli/reg/2023/2854/oj}}
}

@Misc{eu-gdpr,
 author = {{European Parliament and Council}},
 title  = {{Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)}},
 month = {May},
 year = {2016},
 note = {{Official Journal of the European Union L 119}},
 howpublished = {\url{http://data.europa.eu/eli/reg/2016/679/oj}}
}

@Misc{bpr4gdprD41,
 author = {Mozafari Mehr, Azadeh and Koukovini, Maria N.},
 title  = {Initial specification and prototyping of the process reengineering framework},
 month = {September},
 year = {2019},
 note = {{BPR4GDPR Deliverable D4.1}},
 howpublished = {\url{https://www.bpr4gdpr.eu/results/deliverables/d4-1-initial-specification-and-prototyping-of-the-process-re-engineering-framework/}}
}


@inproceedings{Hochstenbach2025,
  author       = {{Hochstenbach, Patrick and Gonçalves Crisóstomo Esteves, Beatriz and Verborgh, Ruben}},
  booktitle    = {{Joint Proceedings of the ESWC 2025 Workshops and Tutorials co-located with 22nd Extended Semantic Web Conference (ESWC 2025)}},
  issn         = {{1613-0073}},
  location     = {{Portorož, Slovenia}},
  pages        = {{11}},
  publisher    = {{CEUR-WS}},
  title        = {{Automated policy negotiation: a four-course meal}},
  volume       = {{3977}},
  year         = {{2025}},
}

@InProceedings{Costantino2018,
author="Costantino, Gianpiero
and Martinelli, Fabio
and Matteucci, Ilaria
and Petrocchi, Marinella",
editor="Mori, Paolo
and Furnell, Steven
and Camp, Olivier",
title="Efficient Detection of Conflicts in Data Sharing Agreements",
booktitle="Information Systems Security and Privacy",
year="2018",
publisher="Springer International Publishing",
address="Cham",
pages="148--172"
}


@InProceedings{estevez2021,
  author={Esteves, Beatriz and Pandit, Harshvardhan J. and Rodríguez-Doncel, Víctor},
  booktitle={2021 IEEE European Symposium on Security and Privacy Workshops (EuroS\&PW)}, 
  title={{ODRL Profile for Expressing Consent through Granular Access Control Policies in Solid}}, 
  year={2021},
  pages={298-306},
  doi={10.1109/EuroSPW54576.2021.00038}
  }


@article{Cimmino2025,
title = {{Open Digital Rights Enforcement framework (ODRE): From descriptive to enforceable policies}},
journal = {Computers \& Security},
volume = {150},
pages = {104282},
year = {2025},
issn = {0167-4048},
doi = {10.1016/j.cose.2024.104282},
author = {Andrea Cimmino and Juan Cano-Benito and Raúl García-Castro}
}


