Access control hygiene and the empathy gap in medical IT

HealthSec 2012 - 3rd USENIX Workshop on Health Security and Privacy

Volumn , Issue , 2012, Pages

  Wang, Yifei ^a   Smith, Sean ^a   Gettinger, Andrew ^a  

^a Dartmouth Department of Computer Science_Dartmouth College   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

POLICY DECISIONS; POLICY TOOLS; REAL-WORLD;

ACCESS CONTROL;

EID: 84914179058     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (16)

1. L. Van Boven, D. Dunning, and G. Loewenstein. Egocentric Empathy Gaps Between Owners and Buyers: Misperceptions of the Endowment Effect. Journal of Personality and Social Psychology, 79:66–76, 2000.
2. M. Donner, D. Nochin, D. Shasha, and W. Walasek. Algorithms and Experience in Increasing the Intelligibility and Hygiene of Access Control in Large Organizations. In Proceedings of the IFIP TC11/WG11.3 Fourteenth Annual Working Conference on Database Security. Kluwer, 2001.
3. E. W. Dunn and S. A. Laham. Affective Forecasting: A User’s Guide to Emotional Time Travel. In J. For-gas, editor, Affect in Social Thinking and Behavior. Psychology Press, 2006.
4. A. Ferreira, R. Cruz-Correia, L. Antunes, and D. Chadwick. Access Control: How Can it Improve Patients’ Healthcare? Studies In Health Technology And Informatics, 127:65–76, 2007.
5. P. Garrett and J. Seidman. EMR vs EHR—What is the Difference? HealthITBuzz, January 2011.
6. C. Gunter, D. Liebovitz, and B. Malin. Experience-Based Access Management: A Life-Cycle Framework for Identity and Access Management Systems. IEEE Security and Privacy, 9(5):48–55, 2011.
7. L. Gurley and B. Rose. Advantages and Disadvantages of the Electronic Medical Record. In American Academy of Medical Administrators, 2004.
8. R. Koppel, T.B. Wetterneck, J.L. Telles, and B. Karsh. Workarounds to Barcode Medication Administration Systems: Their Occurrences, Causes, and Threats to Patient Safety. Journal of the American Medical Informatics Association, 15:408–423, 2008.
9. D. Povey. Optimistic Security: A New Access Control Paradigm. In Proceedings of the 1999 New Security Paradigms Workshop, pages 40–45, 2000.
10. E. Pronin, C. Olivola, and K. Kennedy. Doing Unto Future Selves As You Would Do Unto Others: Psychological Distance and Decision Making. Personality and Social Psychology Bulletin, 34:224–237, 2007.
11. J. Robertson. Likert-type Scales, Statistical Methods, and Effect Sizes. Communications of the ACM, 55(5):6–7, May 2012.
12. J. Saleem, A. Russ, A. Neddo, P. Blades, B. Doebbeling, and B. Foresman. Paper Persistence, Workarounds, and Communication Breakdowns in Computerized Consultation Management. International Journal of Medical Informatics, 80(7):466–479, 2011.
13. R. Sandhu, D. Ferrailo, and R. Kuhn. The NIST Model for Role-Based Access Control: Towards a Unified Standard. In Proceedings of the Fifth ACM Workshop on Role-Based Access Control, 2000.
14. S. Sinclair and S.W. Smith. Preventative Directions For Insider Threat Mitigation Via Access Control. In S. Stolfo et al., editors, Insider Attack and Cyber Security: Beyond the Hacker, pages 173–202. Springer-Verlag Advances in Information Security 39, 2008.
15. S. Sinclair and S.W. Smith. What’s Wrong with Access Control in the Real World? IEEE Security and Privacy, 8(4):74–77, 2010.
16. S. Trudeau, S. Sinclair, and S. Smith. The Effects of Introspection on Creating Privacy Policy. In WPES 09: Proceedings of the 8th ACM Workshop on Privacy in the Electronic Society, pages 1–10, 2009.