Role Based Access Control | CSRC | CSRC

One of the most challenging problems in managing large networks is the complexity of security administration. Role based access control (RBAC) (also called 'role based security'), as formalized in 1992 by David Ferraiolo and Rick Kuhn, has become the predominant model for advanced access control because it reduces this cost.   This project site explains RBAC concepts, costs and benefits, the economic impact of RBAC, design and implementation issues, the RBAC standard, and advanced research topics. The NIST model for RBAC was adopted as American National Standard 359-2004 by the American National Standards Institute, International Committee for Information Technology Standards (ANSI/INCITS) on February 11, 2004. It was revised as INCITS 359-2012 in 2012. See the RBAC standard section for more information. New to RBAC? see: Primary RBAC References and Background | RBAC FAQ | RBAC Case Studies. Implementing RBAC? start with: Role Engineering and RBAC Standards | RBAC Case Studies. Researcher or student? see...