Conviviality-driven access control policy

Donia El Kateb, Nicola Zannone, Assaad Moawad, Patrice Caire, Grégory Nain, Tejeddine Mouelhi, Yves Le Traon

Research output: Contribution to journalArticleScientificpeer-review

3 Citations (Scopus)

Abstract

Nowadays many organizations experience security incidents due to unauthorized access to information. To reduce the risk of such incidents, security policies are often employed to regulate access to information. Such policies, however, are often too restrictive, and users do not have the rights necessary to perform assigned duties. As a consequence, access control mechanisms are perceived by users as a barrier and thus bypassed, making the system insecure. In this paper, we draw a bridge between the social concept of conviviality and access control. Conviviality has been introduced as a social science concept for ambient intelligence and multi-agent systems to highlight soft qualitative requirements like user-friendliness of systems. To bridge the gap between conviviality and security, we propose a methodological framework for updating and adapting access control policies based on conviviality recommendations. Our methodology integrates and extends existing techniques to assist system designers in the derivation of access control policies from socio-technical requirements of the system, while taking into account the conviviality of the system. We illustrate our framework using the Ambient Assisted Living use case from the HotCity of Luxembourg.

Original languageEnglish
Pages (from-to)363-382
Number of pages20
JournalRequirements Engineering
Volume20
Issue number4
DOIs
Publication statusPublished - 22 Nov 2015
Externally publishedYes

Keywords

  • Access control
  • Conviviality
  • Negotiable and non-negotiable authorizations
  • Requirement model

Fingerprint Dive into the research topics of 'Conviviality-driven access control policy'. Together they form a unique fingerprint.

  • Cite this

    El Kateb, D., Zannone, N., Moawad, A., Caire, P., Nain, G., Mouelhi, T., & Le Traon, Y. (2015). Conviviality-driven access control policy. Requirements Engineering, 20(4), 363-382. https://doi.org/10.1007/s00766-014-0204-0