Changes between Version 5 and Version 6 of TIEDABACModel

Timestamp:

07/10/12 23:33:43 (12 years ago)

Author:

faber@isi.edu

Comment:

Sparta ABAC papers went missing, links to new references

TIEDABACModel

@@ -3 +3 @@
 == Why ABAC? ==
 
-[http://www.isso.sparta.com/research_projects/security_infrastructure/abac_overview.html ABAC] is an attribute-based authorization system that combines attributes using a simple reasoning system to provide authorization that
+[wiki:TIEDABACRefs ABAC] is an attribute-based authorization system that combines attributes using a simple reasoning system to provide authorization that
  * Expresses delegation and other authorization models efficiently and scalably
  * Allows access requesters and granters to control how much information they reveal
@@ -11 +11 @@
 == ABAC Model ==
 
-ABAC facilitates authorization decisions by providing rules under which actors in the system, called principals, prove that they have certain attributes necessary for accessing resources.  Which attributes are required for a given resource is a matter of policy outside the system.  ABAC can represent delegation of various forms in scalable and separable ways that can be reasoned about formally.  This section sketches the ideas behind ABAC.  More information is available in [http://www.isso.sparta.com/research_projects/security_infrastructure/abac_overview.html#docs the literature ]. 
+ABAC facilitates authorization decisions by providing rules under which actors in the system, called principals, prove that they have certain attributes necessary for accessing resources.  Which attributes are required for a given resource is a matter of policy outside the system.  ABAC can represent delegation of various forms in scalable and separable ways that can be reasoned about formally.  This section sketches the ideas behind ABAC.  More information is available in 
+[wiki:TIEDABACRefs  the literature]. 
 
 In ABAC, principals can be an individual (researcher, user) or larger authority (GPO, university).  Prinicpals can use a range of systems to authenticate themselves.  A principal can be the subject of authorization decisions and have attributes asserted about it by other principals.