Viddler

IMPORTANT: SEE IN FULL SCREEN MODE (BUTTON SHOWS UP IN UPPER RIGHT CORNER WHEN HOVERING WITH THE MOUSE)

The World Wide Web offers easy sharing of information, but provide few options for the protection of sensitive information and other sensitive resources. Traditional protection mechanisms rely on the characterization of requesters by identity, which works well in a closed system with a known set of users. Trust negotiation protocols have emerged as a solution for open environments such as the Web, in which parties may make connections and interact without being previously known to each other. In this paper/demo we present an access control framework for the Web that not only provides advanced protection mechanisms for static resources but also personalized generation of content based on policies. Our approach separates security from the application logic, integrates a flexible and expressive policy language, enables (possibly automated) interactions with human and software agents, and boosts user awareness and cooperative enforcement of such policies.