Attribute-Based Access Control
Abstract
Attribute-based access control (ABAC) is a flexible approach that can implement AC policies limited only by the computational language and the richness of the available attributes, making it ideal for many distributed or rapidly changing environments.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Cedar is a language for writing authorization policies, supporting idioms in the style of role-based access control (RBAC) and attribute-based access control (ABAC) and their combination.
“Cedar is a language for writing authorization policies, supporting idioms in the style of role-based access control (RBAC) [14], attribute-based access control (ABAC) [20], and their combination.”
From How We Built Cedar: A Verification-Guided Approach (2024) · cites this paper as [20]
Cited by
Sorted by citations
Smart contract-based access control for the internet of things
Zhang, Y., Kasahara, S., Shen, Y., Jiang, X., & Wan, J. (2019) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2847705 · Cited by 788 · see citing works
A Survey on Zero Trust Architecture: Challenges and Future Trends
He, Y., Huang, D., Chen, L., Ni, Y., & Ma, X. (2022) · Wireless Communications and Mobile Computing · doi:10.1155/2022/6476274 · Cited by 260 · see citing works
“In the early traditional access control model, role-based access control (RBAC) [29] was viewed as a task performed by a user, assigning him/her one or more roles to indirectly associate permissions with the user, It is considered an alternative to mandatory access control (MAC) and discretionary access control (DAC),…”
BackgroundMethodInfluentialHe, J., Treude, C., & Lo, D. (2025) · ACM Transactions on Software Engineering and Methodology · doi:10.1145/3712003 · Cited by 246 · see citing works
Szymanski, T. H. (2022) · IEEE Access · doi:10.1109/access.2022.3169137 · Cited by 59 · see citing works
From Access Control Models to Access Control Metamodels: A Survey
Kashmar, N., Adda, M., & Atieh, M. (2020) · Lecture Notes in Networks and Systems · doi:10.1007/978-3-030-12385-7_61 · Cited by 42 · see citing works
How We Built Cedar: A Verification-Guided Approach
Disselkoen, C., Eline, A., He, S., Headley, K., Hicks, M., Hietala, K., Kastner, J., Mamat, A., McCutchen, M., Rungta, N., et al. (2024) · Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering · doi:10.1145/3663529.3663854 · Cited by 3 · see citing works
- Authors
- Hu, V. C., Kuhn, D. R., Ferraiolo, D. F., & Voas, J.
- Affiliations
- National Institute of Standards and Technology (US)
- Venue
- Computer
- Published
- 2015-02
- Volume
- 48
- Issue
- 2
- Pages
- 85-88
- ISSN
- 0018-9162 (ISSN-L)
- 1558-0814
- OpenAlex
- W2087834864
- Cited by
- 578
- References
- 0
- Citations by year
- 2026: 32 · 2025: 56 · 2024: 59 · 2023: 66 · 2022: 63 · 2021: 63 · 2020: 72 · 2019: 52 · 2018: 45 · 2017: 37 · 2016: 23 · 2015: 9 · 2014: 1
- FWCI
- 126.03
- Type
- journal article
- Language
- en
- Open access
- closed
- Licence
- Locations
- Computer (publishedVersion)
- CERN Document Server (European Organization for Nuclear Research) (submittedVersion)
- Topics
- Social Sciences › Sociology and Political Science › Access Control and Trust
- Physical Sciences › Computer Science › Information Systems › Digital Rights Management and Security
- Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
- Keywords
- attribute-based access control, access control policies, attribute-based cryptography, distributed systems security, dynamic access control
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
