Paper Info
Title
Conviviality-driven access control policy
Abstract
Nowadays many organizations experience security incidents due to unauthorized access to information. To reduce the risk of such incidents, security policies are often employed to regulate access to information. Such policies, however, are often too restrictive, and users do not have the rights necessary to perform assigned duties. As a consequence, access control mechanisms are perceived by users as a barrier and thus bypassed, making the system insecure. In this paper, we draw a bridge between the social concept of conviviality and access control. Conviviality has been introduced as a social science concept for ambient intelligence and multi-agent systems to highlight soft qualitative requirements like user-friendliness of systems. To bridge the gap between conviviality and security, we propose a methodological framework for updating and adapting access control policies based on conviviality recommendations. Our methodology integrates and extends existing techniques to assist system designers in the derivation of access control policies from socio-technical requirements of the system, while taking into account the conviviality of the system. We illustrate our framework using the Ambient Assisted Living use case from the HotCity of Luxembourg.
Year
DOI
Venue
2015
10.1007/s00766-014-0204-0
Requirements Engineering
Keywords
Field
DocType
Conviviality, Access control, Negotiable and non-negotiable authorizations, Requirement model
Intelligent agent,Computer science,Computer security,Ambient intelligence,Multi-agent system,Social constructionism,Access control,Security policy,Access to information
Journal
Volume
Issue
ISSN
20
4
1432-010X
Citations 
PageRank 
References 
2
0.35
49
Authors
7
Name
Order
Citations
PageRank
Donia El Kateb1444.81
Nicola Zannone2107880.64
Assaad Moawad3315.37
Patrice Caire4739.96
Gregory Nain525916.56
Tejeddine Mouelhi626314.93
Yves Le Traon73922190.39