A comprehensive presentation to XACML

• Published in: Proceedings of third International Conference on Computational Intelligence and Information Technology pp. 155 - 161
• Main Authors: Abd El-Aziz, A.A, Kannan, A
• Format: Conference Proceeding
• Language: English
• Published: Stevenage, UK IET 2013; The Institution of Engineering & Technology
• Subjects: Data security; OASIS; XML; authorisation; organization for the advancement of structured information standards; XML-based language; access control policy language; ABAC; access control decisions language; XACML; policy description method
• ISBN: 9781849198592; 1849198594
• DOI: 10.1049/cp.2013.2585

XACML is an XML-based language for access control that has been standardized by OASIS (Organization for the Advancement of Structured Information Standards). XACML describes both an access control policy language that are ABAC and an access control decisions (request/response) language. Although XACML is recognized as a precise and complete policy description method, the structure of an XACML policy is complex and users need to understand XACML well and writes down the verbose policy all by hand, which make XACML difficult to master and use. In this paper, we present a comprehensive description of XACML to support the future research and development work.