Guide to Attribute Based Access Control (ABAC) Definition and Considerations

By Vincent C. Hu, David F. Ferraiolo, R. Kuhn, Adam Schnitzer, Kenneth Sandlin, Robert Miller, Karen Scarfone. 2014

1,135 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Blockchain Based Access Control (2017, neutral): “In Attribute-based Access Control (ABAC) [1], policies consist of a set of conditions over the attributes which describe the features of the subjects, resources, environment, etc., involved in the access request.”
Security and Privacy Controls for Information Systems and Organizations (2020, neutral): “References: [PRIVACT], [OMB A-130], [SP 800-57-1], [SP 800-57-2], [SP 800-57-3], [SP 800-162], [SP 800-178], [IR 7874].”
Zero Trust Architecture (ZTA): A Comprehensive Survey (2022, methodology): “As described by NIST, the ACM is a logical component that assesses access requests and decides whether the subject is authorized to execute the requested operation [68].”
Internet of Vehicles: From intelligent grid to autonomous cars and vehicular fogs (2016, methodology): “To investigate this approach further, we adopt a general term attribute.(33) An attribute is a word describing a characteristic of an object, and its example includes name, geolocation, date of generation, expiration, type, and so on.”
Blockchain smart contracts: Applications, challenges, and future trends (2021, background): “These rights are expressed using access control policies, which consist of a set of conditions that are evaluated against the current context to make the access decision each time a request is received [40].”