D. N. Kolegov, O. V. Broslavsky, N. E. Oleksov, “Towards ABAC Engine framework”, Prikl. Diskr. Mat. Suppl., 2017, Issue 10,Pages <nobr>115

This article is cited in 1 paper

Mathematical Foundations of Computer Security

Towards ABAC Engine framework

D. N. Kolegov^ab, O. V. Broslavsky^ab, N. E. Oleksov^ab

^a Tomsk State University, Tomsk
^b "Positive Technologies", Tomsk

Abstract: We propose a new method for development of attribute based access control. The method extends the XACML control in the following way. We use ALFAScript domain specific language, based on XACML's ALFA, to describe access control policy. ALFAScript policy is compiled into Lua, instead of XML or runtime programming language, and is used to evaluate described access control policy. The method is implemented in ABAC Engine.

Keywords: access control, ABAC, XACML, ALFA, Lua.

UDC: 004.94

DOI: 10.17223/2226308X/10/45