
Attribute-Based Access Control (ABAC)
An access control method where subject requests to perform operations on objects are granted or denied based on:
- assigned attributes of the subject,
- assigned attributes of the object,
- environment conditions, and
- a set of policies that are specified in terms of those attributes and conditions.
Source: NIST SP 800-263
Context-Based Access Control (CBAC)
The term CBAC is coined by Cisco, not a typical access control mechanisms you encountered in most of the CISSP study guides or NIST guidelines.
The Context-Based Access Control (CBAC) feature of the Cisco IOS® Firewall Feature Set actively inspects the activity behind a firewall.
Source: Cisco