Know why your access was denied: Regulating feedback for usable security

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2004, Pages 52-61

  Kapadia, Apu ^a   Sampemane, Geetanjali ^a   Campbell, Rov H ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Access control; Feedback; Policy protection; Privacy; Security; Usability

Indexed keywords

ACCESS CONTROLS; HUMAN FACTORS; POLICY PROTECTION; PRIVACY; SYSTEM USABILITY;

AVAILABILITY; COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; DECISION MAKING; ERROR ANALYSIS; FEEDBACK; USER INTERFACES;

SECURITY OF DATA;

EID: 14844322854     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (26)

1. Beate Bollig and Ingo Wegener. Improving the variable ordering of OBDDs is NP-complete. IEEE Trans. on Computers, 45(9):993-1001, Sept. 1996.
2. Piero Bonatti, Ernesto Damiani, and Pierangela Samarati. A component-based architecture for secure data publication. In Proceedings of 17th Annual Computer Security Applications Conference (ACSAC), pages 309-318, New Orleans, LA, December 2001.
3. Piero A. Bonatti and Pierangela Samarati. A uniform framework for regulating service access and information release on the Web. Journal of Computer Security, 10(3):241-271, 2002.
4. Kenneth M. Butler, Don E. Ross, Rohit Kapur, and M.Ray Mercer. Heuristics to compute variable orderings for efficient manipulation of ordered binary decision diagrams. In Proceedings of the 28th conference on ACM/IEEE Design Automation, pages 417-420, San Francisco, CA, June 1991.
5. David Eppstein. Finding the k shortest paths. In Proc. 35th Symp. Foundations of Computer Science, pages 154-165. IEEE, November 1994.
6. David F. Ferraiolo and D. Richard Kuhn. Role-based access controls. In Proc. 15th NIST-NCSC National Computer Security Conference, pages 554-563, Baltimore, MD, October 1992.
7. Masahiro Fujita, Yusuke Matsunaga, and Taeko Kakuda. On variable ordering of binary decision diagrams for the application of multi-level logic synthesis. In Proceedings of the conference on European Design Automation, pages 50-54, Amsterdam, February 1991. IEEE Computer Society Press.
8. Jonathan Graehl. kbest, a C++ library for efficiently finding the k shortest paths in a graph. Available from http://jonathan.graehl.org/kbest.zip.
9. Takashi Horiyama and Shuzo Yajima. Exponential lower bounds on the size of OBDDs representing integer divistion. In Proceedings ISAAC, pages 163-172, 1997.
10. Brad Johanson, Armando Fox, and Terry Winograd. The Interactive Workspaces project: Experiences with ubiquitous computing environments. IEEE Pervasive Computing magazine, 1(2):67-74, Apr-Jun 2002.
11. R.E. Korf. Search techniques. In Hossein Bidgoli, editor, Encyclopedia of Information Systems. Academic Press, San Diego, CA, aug 2002.
12. Håkan Kvarnström, Hans Hedbom, and Erland Jonsson. Protecting security policies in ubiquitous environments using one-way functions. In D.Hutter et al., editors, Security in Pervasive Computing 2003, volume 2802 of LNCS, pages 71-85. Springer-Verlag, Heidelberg, 2003.
13. J. Lind-Nielsen. BuDDy - a binary decision diagram package. Technical Report IT-TR: 1999-028, Technical University of Denmark, 1999.
14. P. Orponen and H. Mannila. On approximation preserving reductions: Complete problems and robust measures. Technical Report C-1987-28, University of Helsinki, Dept. of Computer Science, 1987.
15. Shipra Panda and Fabio Somenzi. Who are the variables in your neighborhood. In Proc. International Conference on Computer-Aided Design (ICCAD '95), pages 74-77, San Jose, CA, November 1995.
16. R.E.Bryant. Graph-based algorithms for boolean function manipulation. IEEE Transactions on Computers, C-35(8):677-691, 1986.
17. Manuel Roman, Christopher K. Hess, Renato Cerqueira, Anand Ranganathan, Roy H. Campbell, and Klara Nahrstedt. GaiaOS: A middleware infrastructure to enable Active Spaces. IEEE Pervasive Computing, pages 74-83, Oct-Dec 2002.
18. Jerome H. Saltzer and Michael D. Schroeder. The protection of information in computer systems. In Proceedings of the IEEE, volume 63, pages 1278-1308, September 1975.
19. Geetanjali Sampemane, Prasad Naldurg, and Roy H. Campbell. Access control for Active Spaces. In Proceedings of the Annual Computer Security Applications Conference (ACSAC), pages 343-352, Las Vegas, NV, December 2002.
20. Mark Weiser. The computer for the 21st century. Scientific American, pages 94-104, September 1991.
21. William H. Winsborough and Ninghui Li. Safety in automated trust negotiation. In Proceedings of the 2004 IEEE Symposium on Security and Privacy, pages 147-160, Oakland, CA, May 2004. IEEE Press.
22. Ka-Ping Yee. User interaction design for secure systems. In Proceedings of the 4th International Conference on Information and Communications Security, pages 278-290. Springer-Verlag, 2002.
23. Ting Yu and Marianne Winslett. A unified scheme for resource protection in automated trust negotiation. In Proceedings of the IEEE Symposium on Security and privacy, pages 110-122, May 2003.
24. Ting Yu, Marianne Winslett, and Kent E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Trans. Inf. Syst. Secur., 6(1):l-42, 2003.
25. Terry Zimmerman and Subbarao Kambhampati. Learning-assisted automated planning. AI Magazine, 24(2):73-96, 2003.
26. Mary Ellen Zurko and Richard T. Simon. User-centered security. In Proceedings of the Workshop on New Security Paradigms (NSPW), pages 27-33, Lake Arrowhead, CA, September 1996.