Lecture 3 - ABAC Flashcards
ABAC?
ABAC controls access based on attributes of the users, the
resources to be accessed, and current environmental conditions
What is a concern with ABAC?
performance, as resource and user properties would have to be evaluated on each access
What is ABAC exceptionally good for and why?
web services, as these already have a high performance cost on each access
What does ABAC stand for?
Attribute Based Access Control
Is the subject a passive or active entity?
active
Is the object a passive or active entity?
passive
What is special about environment attributes?
They’re usually ignored in most access control policies that are implemented
How many independent sources of information are used to make the access control decision?
4 these are attrbutes for 3 entities and the access control policy (rules)
Advantages of ABAC?
powerful and extremely flexible
Disadvantages of ABAC?
complex to implement and design
performance can be poor
hence there is a tradeoff on complexity and performance
What is a policy?
The set of rules and relationships that govern allowable behaviour within a system.
What are privileges?
represent authorized behaviour of a subject
How is a policy written?
From the perspective of the privilages available to subjects (what they can do) and how the object needs protecting.
Example rule?
