Role-based access control (RBAC) is a security mechanism that can greatly lower the cost and complexity of securing large networked and Web-based systems. This updated edition provides comprehensive coverage of access control models, new RBAC standards, case studies, and discussions on role engineering and the design of role-based systems.

This book presents a combination of technical and administrative instructions for the development of attribute-based access control to improve information sharing within organizations.