What is Triple ABAC?
Triple ABAC (Attribute-Based Access Control) is TripleCyber's policy enforcement engine. It evaluates attributes from users, devices, resources, and environmental context to make real-time access decisions. Unlike role-based systems that grant static permissions, Triple ABAC evaluates every request dynamically based on who is asking, what they are asking for, and the current risk context.
How It Fits into TripleSOC
Triple ABAC is a cross-cutting component. It does not operate in isolation. Instead, it applies policy enforcement across three TripleSOC sub-products:
- Triple PKI — ABAC policies govern certificate issuance, renewal, and revocation based on device trust attributes
- Triple DNS — ABAC rules control DNS resolution behavior based on user identity and risk score
- Triple OAuth — ABAC conditions determine token scope and session duration based on contextual attributes
TripleSOC correlates ABAC policy decisions with security events, giving your SOC team visibility into why access was granted or denied.
Key Capabilities
- Dynamic policy evaluation — decisions made at request time, not provisioning time
- Multi-attribute context — combines user identity, device posture, location, time, and ZTRS risk score
- Cross-product enforcement — single policy framework applied to PKI, DNS, and OAuth
- Audit trail — every policy decision is logged and visible in the TripleSOC dashboard
- Trust zone integration — ABAC policies reference Anonymous, Verified, and Secure zone classifications
How It Works with Other Components
Triple ABAC consumes risk data from ZTRS (Zero Trust Risk Score) to inform policy decisions. When a user's risk score changes, ABAC policies automatically adjust access levels without manual intervention. This creates a continuous, adaptive security posture where trust is never assumed and always verified.
