A framework for the extended evaluation of ABAC policies
Abstract A main challenge of attribute-based access control (ABAC) is the handling of missing information. Several studies have shown that the way standard ABAC mechanisms, e.g. based on XACML, handle missing information is flawed, making ABAC policies vulnerable to attribute-hiding attacks. Recent...
Main Authors: | , , |
---|---|
Format: | Article |
Sprog: | English |
Udgivet: |
SpringerOpen
2019-02-01
|
Serier: | Cybersecurity |
Fag: | |
Online adgang: | http://link.springer.com/article/10.1186/s42400-019-0024-0 |