Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 7316

Assessment of Access Control Systems

Date Published: September 2006

Author(s)

Vincent Hu (NIST), David Ferraiolo (NIST), Richard Kuhn (NIST)

Abstract

Keywords

access control; authentication; authorization; Discretionary Access Control; Non-Discretionary Access Control; RBAC; Role-Based Access Control; Rule-Based Access Control; security metrics; XML-Based Access Control
Control Families

Access Control

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.7316
Download URL

Supplemental Material:
None available

Related NIST Publications:
SP 800-178

Document History:
09/29/06: IR 7316 (Final)

Topics

Security and Privacy

audit & accountability, planning, risk assessment

Laws and Regulations

OMB Circular A-130