Attribute-Based Access Control (ABAC)

URI: https://gptkb.org/entity/Attribute-Based_Access_Control_(ABAC)
GPTKB entity
Statements (49)
Predicate Object
gptkbp:instanceOf Access Control System
gptkbp:abbreviation gptkb:ABAC
gptkbp:alsoKnownAs gptkb:Policy-Based_Access_Control
gptkbp:attributesInclude action attributes
environmental attributes
resource attributes
user attributes
gptkbp:combines gptkb:MAC
gptkb:RBAC
gptkbp:contrastsWith gptkb:Role-Based_Access_Control_(RBAC)
gptkb:Discretionary_Access_Control_(DAC)
gptkb:Mandatory_Access_Control_(MAC)
gptkbp:controlsAccessBasedOn attributes
gptkbp:enables compliance with regulations
least privilege
separation of duties
fine-grained access control
dynamic access control
attribute-based authorization
contextual access control
risk-adaptive access control
scalable access management
gptkbp:firstDescribed 1990s
gptkbp:governedBy organizational policies
https://www.w3.org/2000/01/rdf-schema#label Attribute-Based Access Control (ABAC)
gptkbp:implementedIn gptkb:XACML
gptkbp:policy gptkb:ALFA
gptkb:XACML
gptkbp:policyDefinedBy policies
logical rules
gptkbp:relatedConcept gptkb:Zero_Trust_Architecture
gptkb:Policy_Administration_Point_(PAP)
gptkb:Policy_Decision_Point_(PDP)
gptkb:Policy_Enforcement_Point_(PEP)
gptkb:Policy_Information_Point_(PIP)
gptkbp:relatedStandard gptkb:NIST_SP_800-162
gptkbp:standardizedBy gptkb:NIST_Special_Publication_800-162
gptkbp:supports attribute-based policies
context-aware access
dynamic policy evaluation
multi-factor access decisions
gptkbp:usedBy gptkb:government_agency
healthcare organizations
financial institutions
gptkbp:usedIn cloud computing
information security
enterprise systems
gptkbp:bfsParent gptkb:Role-Based_Access_Control_(RBAC)
gptkbp:bfsLayer 6