U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Computer Security Resource Center

Computer Security Resource Center

    Projects Attribute Based Access Control

Attribute Based Access Control ABAC

News and Updates

NIST Researchers Publish Book on Attribute-Based Access Control
March 14, 2018
Access control is the process of defining and limiting which users are allowed access to particular resources.  NIST researchers have recently published a book on Attribute-based access control (ABAC), one of the latest...
NIST released Draft SP 800-178, A Comparison of ABAC Standards
December 2, 2015
NIST announces the public comment release of NIST Special Publication 800-178, A Comparison of Attribute Based Access Control (ABAC) Standards for Data Services. Extensible Access Control Markup Language (XACML) ...
NIST Cybersecurity Practice Guide
October 1, 2015
NIST requests public comments on Draft NIST Cybersecurity Practice Guide 1800-3, Attribute Based Access Control. 
NCCoE Attribute Based Access Control Building Block
August 14, 2015
The National Institute of Standards and Technology (NIST) invites organizations to provide products and technical expertise to support and demonstrate security platforms for the Attribute Based Access Control Building Block....
SP 800-162, Guide to ABAC Definition and Considerations
January 21, 2014
NIST announces the final release of Special Publication (SP) 800-162, Guide to Attribute Based Access Control (ABAC) Definition and Considerations. ABAC is a logical access control methodology where authorization to perform a...
Draft SP 800-162, Guide to ABAC Definition and Considerations
April 22, 2013
NIST announces the public comment release of draft Special Publication (SP) 800-162, Guide to Attribute Based Access Control (ABAC) Definition and Considerations. ABAC is a logical access control methodology where...

Contacts

Dr. Vincent Hu
vincent.hu@nist.gov
301-975-4975

Mr. David Ferraiolo
david.ferraiolo@nist.gov
301-975-3046

Topics

Security and Privacy: access control

Created May 24, 2016, Updated June 22, 2020