Exploring the Next Generation of Access Control Methodologies

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

ITL Bulletin

Exploring the Next Generation of Access Control Methodologies

Documentation Topics

Date Published: November 2016

Abstract

This bulletin summarizes the information presented in NIST SP 800-178: A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications. The publication describes Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC), and then compares them with respect to five criteria. The goal of this publication is to help ABAC users and vendors make informed decisions when addressing future data service policy enforcement requirements.

Keywords

access control; access control mechanism; access control model; access control policy; attribute based access control (ABAC); authorization; Extensible Access Control Markup Language (XACML); Next Generation Access Control (NGAC); privilege

Control Families

Access Control

Documentation

Publication:
November 2016 ITL Bulletin (pdf)

Supplemental Material:
None available

Related NIST Publications:
SP 800-178

Document History:
11/21/16: ITL Bulletin (Final)

Topics

Security and Privacy

access authorization, access control