xacml — archive

[Hal Lockhart]

During the call there was some discussion of the definition of ABAC. While as I pointed out during the call, our concern is XACML not ABAC per se, XACML is frequently cited as an exemplar of ABAC and further in order to have a clear understanding during our debates, we need to have at least rough agreement on what we mean by the words we use. A quick search for "ABAC definition" produced these results, among others. ("abac" can refer to a certain type of graph.) All of these seem to correspond to my idea of what the definition is. http://www.itbusinessedge.com/itdownloads/security/guide-to-attribute-based-access-control-abac-definition-and-considerations.html http://nvlpubs.nist.gov/nistpubs/specialpublications/NIST.sp.800-162.pdf https://en.wikipedia.org/wiki/Attribute-based_access_control Hal