Microsoft Encyclopedia Of Security Phần 10

Ưu điểm của XACML là nó đại diện cho một chuẩn công nghiệp có thể cung cấp khả năng tương tác giữa các nền tảng khác nhau và các hệ thống sử dụng khác nhau cơ chế kiểm soát truy cập độc quyền. | XACML XACML Definite Encoding Rules DER Defines how to store and transfer the data See Also digital certificate Public Key Infrastructure PKI Public-Key Infrastructure PKIX Secure Electronic Transaction SET Secure Multipur-pose Internet Mail Extensions S MIME Secure Sockets Layer SSL XACML A standard for secure information access using Extensible Markup Language XML . Overview XACML which stands for Extensible Access Control Markup Language is a standard that specifies how to express XML policies for controlling access to information over the Internet. XACML was developed by the Organization for the Advancement of Structured Information Standards OASIS and is the result of efforts by IBM Sun Entrust and others to advance e-business by standardizing Web services security operations using XML. XACML is part of a broader secu rity standards initiative from OASIS that includes Security Assertion Markup Language SAML and Web Services Security WS-Security . The advantage of XACML is that it represents an industry standard that can provide interoperability between diverse platforms and systems using different proprietary access control mechanisms. XACML also is an extensible framework that can evolve to support new access control policy needs and mechanisms. The current version of the standard is XACML 1. Implementation XACML defines two kinds of XML dialects for security purposes A control language for expressing access control policies defining who has what kind of access to which resources A request response language for expressing requests for access to resources and responses that allow or deny access PDP olicy 4 XACML response PEP XACML. How XACML uses policy to control access to resources. X 378 XACML XACML Definite Encoding Rules DER Defines how to store and transfer the data See Also digital certificate Public Key Infrastructure PKI Public-Key Infrastructure PKIX Secure Electronic Transaction SET Secure Multipur-pose Internet Mail Extensions S MIME .