Conviviality-driven access control policy

El Kateb, Donia; Zannone, N.; Moawad, Assaad; Caire, Patrice; Nain, Grégory; Mouelhi, T.; Le Traon, Yves

doi:10.1007/s00766-014-0204-0

Reference : Conviviality-driven access control policy


	Document type :	Scientific journals : Article
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/26427

Title :	Conviviality-driven access control policy
Language :	English
Author, co-author :	El Kateb, Donia [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > Computer Science and Communications Research Unit (CSC)]
	Zannone, N. [Security Group, Department of Mathematics and Computer Science, Eindhoven University of Technology, P.O. Box 513, Eindhoven, Netherlands]
	Moawad, Assaad [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
	Caire, Patrice [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
	Nain, Grégory [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
	Mouelhi, T. [Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, Luxembourg City, Luxembourg]
	Le Traon, Yves [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)]
Publication date :	2015
Journal title :	Requirements Engineering
Publisher :	Springer-Verlag London Ltd
Volume :	20
Issue/season :	4
Pages :	363-382
Peer reviewed :	Yes (verified by ORBi^lu)
Audience :	International
ISSN :	09473602
Keywords :	[en] Access control ; Conviviality ; Negotiable and non-negotiable authorizations ; Requirement model ; Intelligent agents ; Multi agent systems ; Access control mechanism ; Access control policies ; Ambient assisted living ; Methodological frameworks ; Requirement modeling ; Social science concepts
Abstract :	[en] Nowadays many organizations experience security incidents due to unauthorized access to information. To reduce the risk of such incidents, security policies are often employed to regulate access to information. Such policies, however, are often too restrictive, and users do not have the rights necessary to perform assigned duties. As a consequence, access control mechanisms are perceived by users as a barrier and thus bypassed, making the system insecure. In this paper, we draw a bridge between the social concept of conviviality and access control. Conviviality has been introduced as a social science concept for ambient intelligence and multi-agent systems to highlight soft qualitative requirements like user-friendliness of systems. To bridge the gap between conviviality and security, we propose a methodological framework for updating and adapting access control policies based on conviviality recommendations. Our methodology integrates and extends existing techniques to assist system designers in the derivation of access control policies from socio-technical requirements of the system, while taking into account the conviviality of the system. We illustrate our framework using the Ambient Assisted Living use case from the HotCity of Luxembourg. © 2014, Springer-Verlag London.
Funders :	NWO, Nederlandse Organisatie voor Wetenschappelijk Onderzoek
Permalink :	http://hdl.handle.net/10993/26427
DOI :	10.1007/s00766-014-0204-0

File(s) associated to this reference

Fulltext file(s):

	File	Commentary	Version	Size	Access
Open access	Conviviality-Driven Access Control Policy.pdf		Publisher postprint	3.84 MB	View/Open

All documents in ORBi^lu are protected by a user license.

University of Luxembourg Library | Feedback | Legal notices