Everything about XACML

🧭 Start here: a 6-step reading path

1. Read the overview: XACMLA 5-minute orientation
2. Skim a recent paper: LP-SBA-XACML: Lightweight Semantics Based Scheme Enabling Intelligent Behavior-Aware Privacy for IoTInfluential work since 2022
3. Pick up a classic book: Formal Aspects of Component SoftwareThe most-reprinted book on the subject
4. Read the landmark paper: Designing Fast and Scalable XACML Policy Evaluation EnginesCited 59 times
5. Go sideways: Abbreviated Language for AuthorizationA closely related topic
6. Go sideways: Web API securityA closely related topic

🏆 Landmark papers (most cited)

• Designing Fast and Scalable XACML Policy Evaluation Engines

  Alex X. Liu, Fei Chen, JeeHyun Hwang · 2011 · IEEE Transactions on Computers · 59 citations

• XACML Policy Integration Algorithms

  Pietro Mazzoleni, Bruno Crispo, Swaminathan Sivasubramanian · 2008 · ACM Transactions on Information and System Security · 58 citations

• Formal analysis of XACML policies using SMT

  Fatih Turkmen, Jerry den Hartog, Silvio Ranise · 2017 · Computers & Security · 43 citations

• Adaptive Reordering and Clustering-Based Framework for Efficient XACML Policy Evaluation

  Said Marouf, Mohamed Shehab, Anna Squicciarini · 2011 · IEEE Transactions on Services Computing · 34 citations

• The logic of XACML

  Carroline Dewi Puspa Kencana Ramli, Hanne Riis Nielson, Flemming Nielson · 2014 · Science of Computer Programming · 34 citations

• SBA-XACML: Set-based approach providing efficient policy decision process for accessing Web services

  Azzam Mourad, Hussein Jebbaoui · 2015 · Expert Systems with Applications · 30 citations

• Semantics-based approach for detecting flaws, conflicts and redundancies in XACML policies

  Hussein Jebbaoui, Azzam Mourad, Hadi Otrok · 2015 · Computers & Electrical Engineering · 29 citations

• A Similarity Measure for Comparing XACML Policies

  Dan Lin, Prathima Rao, Rodolfo Ferrini · 2013 · IEEE Transactions on Knowledge and Data Engineering · 28 citations

🆕 Influential since 2022

• LP-SBA-XACML: Lightweight Semantics Based Scheme Enabling Intelligent Behavior-Aware Privacy for IoT

  Mohamad Chehab, Azzam Mourad · 2022 · IEEE Transactions on Dependable and Secure Computing · 20 citations

• Enhance cloud security and effectiveness using improved RSA-based RBAC with XACML technique

  A. Kousalya, Nam-kyun Baik · 2023 · International Journal of Intelligent Networks · 16 citations

• A Formal Validation Approach for XACML 3.0 Access Control Policy

  Carmine Caserio, Francesca Lonetti, Eda Marchetti · 2022 · Sensors · 10 citations

• XACML for Mobility (XACML4M)—An Access Control Framework for Connected Vehicles

  Ashish Ashutosh, Armin Gerl, Simon Wagner · 2023 · Sensors · 8 citations

• On-device derivation of IoT usage control policies: Automating U-XACML policy generation from natural language with LLMs in smart homes environments

  Loay Alajramy, Marco Simoni, Marco Rasori · 2026 · Future Generation Computer Systems · 6 citations

📚 Books worth reading

• Formal Aspects of Component SoftwareFarhad Arbab · 2012
• Systems and virtualization managementSVM (2008 Munich, Germany) · 2008

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

• Abbreviated Language for Authorization The Abbreviated Language for Authorization (ALFA) is a domain-specific language used in the formulation of access-control policies. XACML, the eXtensible…
• Web API security Web API security entails authenticating programs or users who are invoking a web API. Along with the ease of API integrations come the difficulties of…
• Web Application Description Language The Web Application Description Language (WADL) is a machine-readable XML description of HTTP-based web services. WADL models the resources provided by…
• Attribute-based access control Attribute-based access control (ABAC), also known as policy-based access control for IAM, defines an access control paradigm whereby a subject's authorization…
• SAML 2.0 Security Assertion Markup Language (SAML) 2.0 is a version of the SAML standard for exchanging authentication and authorization identities between security…
• SAML 1.1 Security Assertion Markup Language (SAML) is an XML standard for exchanging authentication and authorization data between security domains. SAML is a product…
• WS-SecurityPolicy WS-Security Policy is a web services specification, created by IBM and 12 co-authors, that has become an OASIS standard as of version 1.2. It extends the…
• PERMIS PERMIS (PrivilEge and Role Management Infrastructure Standards) is a sophisticated policy-based authorization system that implements an enhanced version…