ABAC Lab: An Interactive Platform for Attribute-based Access Control Policy Analysis, Tools, and Datasets

TL;DR

ABAC Lab is an interactive platform that integrates datasets and analytical tools to support research and policy development in Attribute-Based Access Control, addressing current challenges in dataset availability and benchmarking.

Contribution

The paper introduces ABAC Lab, a platform that combines existing and new real-world ABAC datasets with analytical tools for policy evaluation and benchmarking.

Findings

Provides a centralized platform for ABAC policy analysis.

Introduces two new real-world ABAC datasets.

Facilitates research and policy adoption in ABAC.

Abstract

Attribute-Based Access Control (ABAC) provides expressiveness and flexibility, making it a compelling model for enforcing fine-grained access control policies. To facilitate the transition to ABAC, extensive research has been conducted to develop methodologies, frameworks, and tools that assist policy administrators in adapting the model. Despite these efforts, challenges remain in the availability and benchmarking of ABAC datasets. Specifically, there is a lack of clarity on how datasets can be systematically acquired, no standardized benchmarking practices to evaluate existing methodologies and their effectiveness, and limited access to real-world datasets suitable for policy analysis and testing. This paper introduces ABAC Lab, an interactive platform that addresses these challenges by integrating existing ABAC policy datasets with analytical tools for policy evaluation. Additionally, we present two new ABAC datasets derived from real-world case studies. ABAC Lab serves as a valuable resource for both researchers studying ABAC policies and policy administrators seeking to adopt ABAC within their organizations. By offering an environment for dataset exploration and policy analysis, ABAC Lab facilitates research, aids policy administrators in transitioning to ABAC, and promotes a more structured approach to ABAC policy evaluation and development.