David Ferraiolo: Importance of Attribute Based Access Controls

David Ferraiolo, group manager, Systems and Applications Group, NIST

The National Institute of Standards and Technology is comparing the existing standards for Attribute Based Access Control. A new publication from the agency describes the two standards, NGAC and XACML and compares them with respect to five criteria to help users and vendors make informed decisions when addressing future data service policy enforcement requirements. David Ferraiolo, group manager of the Systems and Applications Group at NIST, tells Federal Drive with Tom Temin what Attribut Based Access Controls are and why they are important.