NIST has released Draft Special Publication (SP) 800-205, Attribute Considerations for Access Control Systems, which describes the attribute-influencing factors that an access control system must address when engineering and evaluating attributes. The document expands upon NIST SP 800-162, Guide to Attribute Based Access Control (ABAC) Definition and Considerations, by proposing some notional implementation suggestions for consideration from the perspectives of fundamental security properties. It is intended to be a guide for federal agencies to attribute considerations with Attribute Evaluation Scheme examples for access control.
A public comment period for this document is open until April 1, 2019. See the publication details link below for the draft and for instructions on submitting comments.
NOTE: A call for patent claims is included on page iv of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy–Inclusion of Patents in ITL Publications.
Publication details:
https://csrc.nist.gov/publications/detail/sp/800-205/draft
CSRC Update:
https://csrc.nist.gov/news/2019/draft-nist-sp-800-205-available-for-comment
