MODSEC

Workshop on Modeling Security (MODSEC)
http://www.comp.lancs.ac.uk/modsec/

Looked like there was only one paper on policies. Might be worth looking at though.

Tejeddine Mouelhi, Franck Fleurey, Benoit Baudry and Yves Le Traon. Mutating DAC And MAC Security Policies: A Generic Metamodel Based Approach