ABAC Definition

[Hal Lockhart <hal.lockhart@oracle.com>]

During the call there was some discussion of the definition of ABAC. While as I pointed out during the call, our concern is XACML not ABAC per se, XACML is frequently cited as an exemplar of ABAC and further in order to have a clear understanding during our debates, we need to have at least rough agreement on what we mean by the words we use.

A quick search for "ABAC definition" produced these results, among others. ("abac" can refer to a certain type of graph.)

All of these seem to correspond to my idea of what the definition is.

http://www.itbusinessedge.com/itdownloads/security/guide-to-attribute-based-access-control-abac-definition-and-considerations.html


http://nvlpubs.nist.gov/nistpubs/specialpublications/NIST.sp.800-162.pdf

https://en.wikipedia.org/wiki/Attribute-based_access_control

Hal