Logo
ScienceStack
Table of Contents
Fetching ...
Sign In

ABAC Lab: An Interactive Platform for Attribute-based Access Control Policy Analysis, Tools, and Datasets

Thang Bui, Anthony Matricia, Emily Contreras, Ryan Mauvais, Luis Medina, Israel Serrano

TL;DR

ABAC Lab addresses the scarcity of publicly accessible ABAC datasets and benchmarking by providing an open-source platform that bundles established datasets with analysis tools and two large real-world case-study datasets. It unifies data in a common .abac format, adds synthetic log generation, rule analysis, and evaluation capabilities, and ships dataset-construction tooling to support scalable, reproducible research. The platform includes comprehensive documentation and a Python desktop application, facilitating policy mining and analysis for researchers and policy administrators alike. By enabling standardized resources and collaborative contribution, ABAC Lab aims to accelerate ABAC adoption and enable rigorous, comparable evaluations of ABAC policy methods.

Abstract

Attribute-Based Access Control (ABAC) provides expressiveness and flexibility, making it a compelling model for enforcing fine-grained access control policies. To facilitate the transition to ABAC, extensive research has been conducted to develop methodologies, frameworks, and tools that assist policy administrators in adapting the model. Despite these efforts, challenges remain in the availability and benchmarking of ABAC datasets. Specifically, there is a lack of clarity on how datasets can be systematically acquired, no standardized benchmarking practices to evaluate existing methodologies and their effectiveness, and limited access to real-world datasets suitable for policy analysis and testing. This paper introduces ABAC Lab, an interactive platform that addresses these challenges by integrating existing ABAC policy datasets with analytical tools for policy evaluation. Additionally, we present two new ABAC datasets derived from real-world case studies. ABAC Lab serves as a valuable resource for both researchers studying ABAC policies and policy administrators seeking to adopt ABAC within their organizations. By offering an environment for dataset exploration and policy analysis, ABAC Lab facilitates research, aids policy administrators in transitioning to ABAC, and promotes a more structured approach to ABAC policy evaluation and development.

ABAC Lab: An Interactive Platform for Attribute-based Access Control Policy Analysis, Tools, and Datasets

TL;DR

ABAC Lab addresses the scarcity of publicly accessible ABAC datasets and benchmarking by providing an open-source platform that bundles established datasets with analysis tools and two large real-world case-study datasets. It unifies data in a common .abac format, adds synthetic log generation, rule analysis, and evaluation capabilities, and ships dataset-construction tooling to support scalable, reproducible research. The platform includes comprehensive documentation and a Python desktop application, facilitating policy mining and analysis for researchers and policy administrators alike. By enabling standardized resources and collaborative contribution, ABAC Lab aims to accelerate ABAC adoption and enable rigorous, comparable evaluations of ABAC policy methods.

Abstract

Attribute-Based Access Control (ABAC) provides expressiveness and flexibility, making it a compelling model for enforcing fine-grained access control policies. To facilitate the transition to ABAC, extensive research has been conducted to develop methodologies, frameworks, and tools that assist policy administrators in adapting the model. Despite these efforts, challenges remain in the availability and benchmarking of ABAC datasets. Specifically, there is a lack of clarity on how datasets can be systematically acquired, no standardized benchmarking practices to evaluate existing methodologies and their effectiveness, and limited access to real-world datasets suitable for policy analysis and testing. This paper introduces ABAC Lab, an interactive platform that addresses these challenges by integrating existing ABAC policy datasets with analytical tools for policy evaluation. Additionally, we present two new ABAC datasets derived from real-world case studies. ABAC Lab serves as a valuable resource for both researchers studying ABAC policies and policy administrators seeking to adopt ABAC within their organizations. By offering an environment for dataset exploration and policy analysis, ABAC Lab facilitates research, aids policy administrators in transitioning to ABAC, and promotes a more structured approach to ABAC policy evaluation and development.
Paper Structure (21 sections, 2 figures, 2 tables)

This paper contains 21 sections, 2 figures, 2 tables.

Table of Contents

  1. Introduction
  2. Background and Related Work
  3. Related work on ABAC policy mining
  4. Expanding ABAC Datasets
  5. ABAC from Natural Language
  6. Policy Language
  7. ABAC Lab Datasets
  8. Existing Public Datasets
  9. New Real-World Case Study Datasets
  10. Dataset Construction Methodology
  11. ABAC Lab Features
  12. Statistics
  13. Log Generator
  14. Rule Analysis
  15. Access Evaluation
  16. ...and 6 more sections

Figures (2)

  • Figure 1: ABAC Lab Statistics and Analysis Home Page
  • Figure 2: ABAC Lab Access Evaluation Page