Abstract: A method and system for a dynamic configuration of a policy model as a dynamic authorization implementation including a Resource Action Inventory Interface, a Data-Source Integration Interface, a Policy-Sets Interface and a Permissions Interface, wherein an author dynamically creates one or more policies for an application and generates a dynamic authorization implementation. The dynamic authorization implementation is a policy code and/or a policy graph schema. A further method includes the transition from a RBAC policy to an ABAC policy for an application and the generation of a dynamic authorization assignment as a policy code and/or policy graph schema.

Abstract: Methods and systems for controlled data extraction in a computer network, with: monitoring data from at least one program running on a node of the computer network, determination of at least one data portion from the monitored data, where the data portions are selected upon identification of at least one of: application and server events, code line execution, file access and data calls, moving of the determined at least one data portion to a data sink, analyzing of the data on the data sink to determine at least one segment for modification, and modifying the at least one segment.

Abstract: Methods and systems for controlled data extraction in a computer network, with: monitoring data from at least one program running on a node of the computer network, determination of at least one data portion from the monitored data, where the data portions are selected upon identification of at least one of: application and server events, code line execution, file access and data calls, moving of the determined at least one data portion to a data sink, analyzing of the data on the data sink to determine at least one segment for modification, and modifying the at least one segment.

Abstract: Methods and systems for controlled data extraction in a computer network, with: monitoring data from at least one program running on a node of the computer network, determination of at least one data portion from the monitored data, where the data portions are selected upon identification of at least one of: application and server events, code line execution, file access and data calls, moving of the determined at least one data portion to a data sink, analyzing of the data on the data sink to determine at least one segment for modification, and modifying the at least one segment.

Abstract: Methods and systems for controlled data extraction in a computer network, including: monitoring data from at least one program running on a node of the computer network, determining at least one data portion from the monitored data, in accordance with at least one first rule, wherein data portions determined in accordance with the at least one first rule are selected upon identification of at least one of: application and server events, code line execution, file access and data calls, moving the determined at least one data portion to a data sink, analyzing the data on the data sink to determine at least one segment for modification, and modifying the at least one segment, in accordance with at least one second rule.