Proceedings of the 31st Annual Computer Security Applications Conference 2015
DOI: 10.1145/2818000.2818009
|View full text |Cite
|
Sign up to set email alerts
|

Entity-Based Access Control

Abstract: Access control is an important part of security that restricts the actions that users can perform on resources. Policy models specify how these restrictions are formulated in policies. Over the last decades, we have seen several such models, including role-based access control and more recently, attribute-based access control. However, these models do not take into account the relationships between users, resources and entities and their corresponding properties. This limits the expressiveness of these models.… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1

Citation Types

0
1
0

Year Published

2018
2018
2023
2023

Publication Types

Select...
5
1

Relationship

0
6

Authors

Journals

citations
Cited by 24 publications
(1 citation statement)
references
References 20 publications
0
1
0
Order By: Relevance
“…The consortium's XACML can be used to express Attribute Based Access control Model (ABAC) policies Access control systems can be designed and implemented using the XACML standard's reference architecture that defines the system components and usage flow. More expressive access control policies can be defined using Entity-Based Access Control (EBAC) [27], another commonly used technique. Both attribute value comparisons and relationship traversals along arbitrary entities are supported, so this is possible.…”
Section: Related Workmentioning
confidence: 99%
“…The consortium's XACML can be used to express Attribute Based Access control Model (ABAC) policies Access control systems can be designed and implemented using the XACML standard's reference architecture that defines the system components and usage flow. More expressive access control policies can be defined using Entity-Based Access Control (EBAC) [27], another commonly used technique. Both attribute value comparisons and relationship traversals along arbitrary entities are supported, so this is possible.…”
Section: Related Workmentioning
confidence: 99%