Reference : Conviviality-driven access control policy
Scientific journals : Article
Engineering, computing & technology : Computer science
http://hdl.handle.net/10993/26427
Conviviality-driven access control policy
English
El Kateb, Donia mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > Computer Science and Communications Research Unit (CSC)]
Zannone, N. [Security Group, Department of Mathematics and Computer Science, Eindhoven University of Technology, P.O. Box 513, Eindhoven, Netherlands]
Moawad, Assaad mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
Caire, Patrice mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
Nain, Grégory mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
Mouelhi, T. [Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, Luxembourg City, Luxembourg]
Le Traon, Yves mailto [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)]
2015
Requirements Engineering
Springer-Verlag London Ltd
20
4
363-382
Yes (verified by ORBilu)
International
09473602
[en] Access control ; Conviviality ; Negotiable and non-negotiable authorizations ; Requirement model ; Intelligent agents ; Multi agent systems ; Access control mechanism ; Access control policies ; Ambient assisted living ; Methodological frameworks ; Requirement modeling ; Social science concepts
[en] Nowadays many organizations experience security incidents due to unauthorized access to information. To reduce the risk of such incidents, security policies are often employed to regulate access to information. Such policies, however, are often too restrictive, and users do not have the rights necessary to perform assigned duties. As a consequence, access control mechanisms are perceived by users as a barrier and thus bypassed, making the system insecure. In this paper, we draw a bridge between the social concept of conviviality and access control. Conviviality has been introduced as a social science concept for ambient intelligence and multi-agent systems to highlight soft qualitative requirements like user-friendliness of systems. To bridge the gap between conviviality and security, we propose a methodological framework for updating and adapting access control policies based on conviviality recommendations. Our methodology integrates and extends existing techniques to assist system designers in the derivation of access control policies from socio-technical requirements of the system, while taking into account the conviviality of the system. We illustrate our framework using the Ambient Assisted Living use case from the HotCity of Luxembourg. © 2014, Springer-Verlag London.
NWO, Nederlandse Organisatie voor Wetenschappelijk Onderzoek
http://hdl.handle.net/10993/26427
10.1007/s00766-014-0204-0

File(s) associated to this reference

Fulltext file(s):

FileCommentaryVersionSizeAccess
Open access
Conviviality-Driven Access Control Policy.pdfPublisher postprint3.84 MBView/Open

Bookmark and Share SFX Query

All documents in ORBilu are protected by a user license.