Table of contents Author City Company Country State/Province Term Interchange  

eXtensible Access Control Markup Language

Blackwell, Simon , CTO ,  Psoom, Inc.,    San Francisco    California    U.S.A. 

Email: sblackwell@psoom.com

Biography

Mr. Blackwell is chairperson of the OASIS XACML technical committee. In 15 years of advanced technology work he has lead development of several software products in the areas of both security and content management. He has also led the development of award winning consumer and business-to-business web sites. He has consulted or provided training to Fortune 500 companies, federal agencies, and university classes on topics as varied as computer security and software product management.

Abstract

eXtensible Access Control Markup language (XACML) is an OASIS initiative to standardize representation of access control policies in a flexible, extensible XML format. This facilitates transfer of policy between disparate legacy security systems as well as allowing for new policy enforcement mechanisms that support granular access control across heterogeneous data and application environments, including XML documents, relational data bases, and application servers. The presentation provides an overview of the standard, to be released in Q1 2002, so that attendees are prepared to take advantage of its functionality. It lays out advantages of XACML for consolidating access control from implementations fragmented across applications, web/application servers, firewalls and operating systems. Finally, it addresses the intersection of entitlement management, personalization, digital rights management, and data asset management in a consolidated policy store.



Complete paper unavailable

This presenter's paper was not received in time to be included in the proceedings.

  Table of contents Author City Company Country State/Province Term Interchange