Title
Towards Attribute-Centric Access Control: an ABAC versus RBAC argument.
Abstract
Recent developments in attribute-based access control have fueled the conventional debate regarding the pros and cons of Attributes-based access control ABAC versus Role-based access control RBAC. However, existing arguments have been primarily focused on the complexity analysis of the two models instead of their comprehensive need analysis. On the contrary, the success and evolution of RBAC as a de-facto access control model is based on the thorough need analysis of using roles as a primary decision factor for controlling access. Analogously, we need to consider the application areas for comparing the use of role-based and attribute-based approach. In this regard, our work aims to bridge the gap between the RBAC and the ABAC proponents by convincing the RBAC supporters of the effectiveness of ABAC. We identify various inherent traits of RBAC which have eventually become its limitations in addressing future access control needs for providing flexible, fine-grained, multifactor, and anonymous authorization in dynamically changing and context sensitive environments. These limitations are usually addressed either through extended RBAC models or ABAC model. We analyze the two approaches with respect to their effectiveness in overcoming the identified limitations and draw the conclusion that the attribute-centric approach is the ultimate future of access control. Copyright © 2016 John Wiley & Sons, Ltd.
Year
DOI
Venue
2016
10.1002/sec.1520
Security and Communication Networks
Keywords
Field
DocType
Access Control,attributes-based access control,role-based access control,ABAC,RBAC,attribute-centric access control,role-centric access control,extended RBAC,ABAC versus RBAC
Computer security,Computer science,Authorization,Role-based access control,Access control,Needs analysis
Journal
Volume
Issue
ISSN
9
16
1939-0114
Citations 
PageRank 
References 
0
0.34
50
Authors
4
Name
Order
Citations
PageRank
Arjumand Fatima100.34
Yumna Ghazi271.47
Muhammad Awais Shibli3427.38
Abdul Ghafoor Abassi410.73