ABAC
Technology & Computing abbreviation · Cybersecurity
| Stands for | Attribute-based access control |
|---|---|
| Categories | Technology & Computing |
ABAC stands for Attribute-based access control, a cybersecurity abbreviation.
An access model that decides each request by evaluating attributes of the user, resource, action and environment against policies, for example letting doctors view records only for patients in their own department during working hours.
Example: With ABAC, the policy checks the document's classification against the user's clearance at request time.
Usage notes
Described in NIST Special Publication 800-162 (2014). ABAC is more flexible than role-based control but harder to audit, because access depends on combinations of attributes. Policy languages include XACML and the condition blocks in AWS IAM policies.
Related abbreviations
More cybersecurity abbreviations
- 2FA – Two-factor authentication
- AAA – Authentication, authorization and accounting
- ACL – Access control list
- AES – Advanced Encryption Standard
- APT – Advanced persistent threat
- ASLR – Address space layout randomization
- ATT&CK – Adversarial Tactics, Techniques, and Common Knowledge
- AV – Antivirus
- BEC – Business email compromise
- BYOD – Bring your own device
- C2 – Command and control
- CA – Certificate authority