XACML (Extensible Access Control Markup Language)
XACML is an XML-based standard, developed by OASIS for writing access control polices for disparate devices and applications.
Before XACML, companies often had to write and maintain numerous authorization systems for their networks.
Approved in February, 2003, XACML includes an access control language and request/response language that let developers write policies dictating what users can access on a network or over the Internet. XACML likely will show up in firewalls, servers and Web access management software but also could be used as the basis for gateways to connect disparate access control policy engines.
Also see: SAML.
Additional resources
OASIS XACML technical committee
The committee that drafted the specification. Its site has the most current copy of the standard.
Security Research Center
The latest security news, analysis and research links from Network World.
Add a comment
