AGentVLM: Access control policy generation and verification framework with language models

Summary

AGentVLM is an access control policy generation and verification framework built on small, open-source language models, designed for on-premise deployment to preserve data confidentiality. The authors report an average F1 score of 90.6 % for identifying natural language access control policies from high-level requirements and a policy generation F1 score of 80.6 %. The framework also extracts complex elements such as purposes and conditions and provides feedback to help administrators refine policies before deployment.