Achieving security-by-design through ontology-driven attribute-based access control in cloud environments [1]