TOOLS/SOURCE CODE
ConGRASS: ABAC Data Generation Tool
If your work is benefitted by using the data generated with the above tool, our CODASPY 2023 paper may please be cited as:
"Tool/Dataset Paper: Realistic ABAC Data Generation using Conditional Tabular GAN", Ritwik Rai and Shamik Sural, ACM Conference on Data and Application Security and Privacy (CODASPY 2023), Charlotte, USA, pp. 273-278, 2023 Link
AVChain: Web Interface showing CARLA, IPFS and Hyperledger Fabric working together
This tool is described in our paper "Trusted Sharing of Autonomous Vehicle Crash Data using Enterprise Blockchain and IPFS", Akarsh Singh, Shounak Sural, Trithankar Sengupta and Shamik Sural, ACM Symposium on Blockchain and Secure Critical Infrastructure (ACM BSCI), Melbourne, Australia, pp. 11-14, 2023 Link
LMN: A Tool for Generating Machine Enforceable Security Policies (MESPs) from Natural Language Access Control Policies (NLACPs) using LLMs.
LMN (Use of LLM for generating MESPs from NLACPs) is a tool that can be used to obtain Attribute based Access Control (ABAC) policies that are machine enforcebale given access control policies specified in natural language. We make use of GPT API calls to generate the MESPs once the user uploads an NLACP file and, optionally, a set of attributes as a second file. LMN automatically downloads the generated MESP as a file in user's machine. This tool is described in our paper "LMN: A Tool for Generating Machine Enforceable Policies from Natural Language Access Control Rules using LLMs", Pratik Sonune, Ritwik Rai, Shamik Sural, Vijayalakshmi Atluri and Ashish Kundu, arXiv 2025 Paper, Link
MuSimA: A Tool with Multi-modal Input for Generating Bespoke ABAC Datasets
MuSimA is a web-based tool for generating ABAC datasets with user-specified probability distributions of attribute values. It supports multi-modal input, i.e., users can provide specifications either as a structured JSON file or as a combination of a minimal JSON along with hand-drawn distribution sketches. In the latter case, a Large Language Model is used to automatically extract appropriate distribution parameters from the sketches. The generated synthetic ABAC data matching the input specifications can be downloaded by the user. This tool is described in our paper "MuSimA: A Tool with Multi-modal Input for Generating Bespoke ABAC Datasets", Saket Jha, Karthikeya S. M. Yelisetty, Singabattu Sathya and Shamik Sural, arXiv 2026 Paper, Link to Paper Link to Tool
LAPS: LLM-based ABAC Policy Synthesis from Unstructured Text
LAPS provides an end-to-end design for converting informally specified information available in heterogeneous formats like pdf, docx and txt into structured Attribute-based Access Control (ABAC) policies. It generates its output in xacml format, besides also producing a policy table along with a graphical representation of the same. This tool is described in our paper "LAPS: LLM-based ABAC Policy Synthesis from Unstructured Text", Pratik Sonune, Ritwik Rai and Shamik Sural, International Workshop on Security and Privacy Analytics, Frankfurt, Germany, 2026 Link to Paper Link to Tool Link to Source Code
Performance Analysis of Multi-Core ABAC Systems using an M/G/m Queue Model
Github repository of the entire codebase for our work on applying M/G/m queue with vacation model for performance analysis of multi-core ABAC systems. This work is described in our paper "Performance Analysis of Multi-Core ABAC Systems using an M/G/m Queue Model", Hunny Chandra, Karthikeya S M Yelisetty, Gaurav Madkaikar, Shamik Sural, Jaideep Vaidya and Vijayalakshmi Atluri, DBSEC 2026 Link to Paper Link to Source Code
ARXIV PAPERS
"EXTree: Towards Supporting Explainability in Attribute-based Access Control", Shanampudi Pranaya Chowdary and Shamik Sural, arXiv link
"MuSimA: A Tool with Multi-modal Input for Generating Bespoke ABAC Datasets", Saket Jha, Karthikeya S. M. Yelisetty, Singabattu Sathya and Shamik Sural arXiv link
"Privacy as Permissible Operations: An ABAC Framework for Policy-Law Compliance", Ajay Dhakar, Arunesh Sinha and Shamik Sural arXiv link
"Towards Harnessing the Power of LLMs for ABAC Policy Mining", More Aayush Babasaheb and Shamik Sural arXiv link
"Generation of Human Comprehensible Access Control Policies from Audit Logs", Gautam Kumar, Ravi Sundaram and Shamik Sural arXiv link