What do you think?
Rate this book
Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: NiST Special Publication 800-178
NIST SP 800-178 October 2016
Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) are very different attribute based access control (ABAC) standards with similar goals and objectives. An objective of both is to provide a standardized way for expressing and enforcing vastly diverse access control policies on various types of data services. However, the two standards differ with respect to the manner in which access control policies are specified and implemented. This document describes XACML and NGAC, and then compares them with respect to five criteria. The goal of this publication is to help ABAC users and vendors make informed decisions when addressing future data service policy enforcement requirements.
Why buy a book you can download for free?
First you gotta find it and make sure it’s the latest version (not always easy). Then you gotta print it using a network printer you share with 100 other people – and its outta paper – and the toner is low (take out the toner cartridge, shake it, then put it back). If it’s just 10 pages, no problem, but if it’s a 250-page book, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour. An engineer that’s paid $75 an hour has to do this himself (who has assistant’s anymore?).
If you are paid more than $10 an hour and use an ink jet printer, buying this book will save you money.
It’s much more cost-effective to just order the latest version from Amazon.com
This book is published by 4th Watch Books and includes copyright material. We publish compact, tightly-bound, full-size books (8 ½ by 11 inches), with glossy covers. 4th Watch Books is a Service Disabled Veteran-Owned Small Business (SDVOSB), and is not affiliated with the National Institute of Standards and Technology.
For more titles published by 4th Watch Books, please cybah.webplus.net
A full copy of all the pertinent cybersecurity standards is available on DVD-ROM in the CyberSecurity Standards Library disc which is available at Amazon.com.
NIST SP 500-299 NIST Cloud Computing Security Reference Architecture
NIST SP 500-291 NIST Cloud Computing Standards Roadmap Version 2
NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 1 & 2
NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 3 DRAFT
NIST SP 1800-8 Securing Wireless Infusion Pumps
NISTIR 7497 Security Architecture Design Process for Health Information Exchanges (HIEs)
NIST SP 800-66 Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule
NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices
NIST SP 800-177 Trustworthy Email
NIST SP 800-184 Guide for Cybersecurity Event Recovery
NIST SP 800-190 Application Container Security Guide
NIST SP 800-193 Platform Firmware Resiliency Guidelines
NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices
NIST SP 1800-2 Identity and Access Management for Electric Utilities
NIST SP 1800-5 IT Asset Financial Services
NIST SP 1800-6 Domain Name Systems-Based Electronic Mail Security
NIST SP 1800-7 Situational Awareness for Electric Utilities
NIST SP 500-288 Specification for WS-Biometric Devices (WS-BD)
NIST SP 500-304 Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information
NIST SP 800-32 Public Key Technology and the Federal PKI Infrastructure
NIST SP 800-63-3 Digital Identity Guidelines
NIST SP 800-63a Digital Identity Guidelines - Enrollment and Identity Proofing
NIST SP 800-63c Digital Identity Guidelines
NIST SP 800-178 Comparison of Attribute Based Access Control (ABAC) Standards
Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) are very different attribute based access control (ABAC) standards with similar goals and objectives. An objective of both is to provide a standardized way for expressing and enforcing vastly diverse access control policies on various types of data services. However, the two standards differ with respect to the manner in which access control policies are specified and implemented. This document describes XACML and NGAC, and then compares them with respect to five criteria. The goal of this publication is to help ABAC users and vendors make informed decisions when addressing future data service policy enforcement requirements.
Why buy a book you can download for free?
First you gotta find it and make sure it’s the latest version (not always easy). Then you gotta print it using a network printer you share with 100 other people – and its outta paper – and the toner is low (take out the toner cartridge, shake it, then put it back). If it’s just 10 pages, no problem, but if it’s a 250-page book, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour. An engineer that’s paid $75 an hour has to do this himself (who has assistant’s anymore?).
If you are paid more than $10 an hour and use an ink jet printer, buying this book will save you money.
It’s much more cost-effective to just order the latest version from Amazon.com
This book is published by 4th Watch Books and includes copyright material. We publish compact, tightly-bound, full-size books (8 ½ by 11 inches), with glossy covers. 4th Watch Books is a Service Disabled Veteran-Owned Small Business (SDVOSB), and is not affiliated with the National Institute of Standards and Technology.
For more titles published by 4th Watch Books, please cybah.webplus.net
A full copy of all the pertinent cybersecurity standards is available on DVD-ROM in the CyberSecurity Standards Library disc which is available at Amazon.com.
NIST SP 500-299 NIST Cloud Computing Security Reference Architecture
NIST SP 500-291 NIST Cloud Computing Standards Roadmap Version 2
NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 1 & 2
NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 3 DRAFT
NIST SP 1800-8 Securing Wireless Infusion Pumps
NISTIR 7497 Security Architecture Design Process for Health Information Exchanges (HIEs)
NIST SP 800-66 Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule
NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices
NIST SP 800-177 Trustworthy Email
NIST SP 800-184 Guide for Cybersecurity Event Recovery
NIST SP 800-190 Application Container Security Guide
NIST SP 800-193 Platform Firmware Resiliency Guidelines
NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices
NIST SP 1800-2 Identity and Access Management for Electric Utilities
NIST SP 1800-5 IT Asset Financial Services
NIST SP 1800-6 Domain Name Systems-Based Electronic Mail Security
NIST SP 1800-7 Situational Awareness for Electric Utilities
NIST SP 500-288 Specification for WS-Biometric Devices (WS-BD)
NIST SP 500-304 Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information
NIST SP 800-32 Public Key Technology and the Federal PKI Infrastructure
NIST SP 800-63-3 Digital Identity Guidelines
NIST SP 800-63a Digital Identity Guidelines - Enrollment and Identity Proofing
NIST SP 800-63c Digital Identity Guidelines
NIST SP 800-178 Comparison of Attribute Based Access Control (ABAC) Standards
70 pages, Paperback
Published October 31, 2016
Ratings & Reviews
Friends & Following
Create a free account to discover what your friends think of this book!
Community Reviews
No one has reviewed this book yet.