In the eye of the beholder: A visualization-based approach to information system security

De Paula, R., Ding, X. , Dourish, P., Nies, K., Pillet, B., Redmiles, D.F., Ren, J., Rode, J.A. and Silva Filho, R. (2005) In the eye of the beholder: A visualization-based approach to information system security. International Journal of Human-Computer Studies, 63(1-2), pp. 5-24. (doi: 10.1016/j.ijhcs.2005.04.021)

Abstract

Computer system security is traditionally regarded as a primarily technological concern; the fundamental questions to which security researchers address themselves are those of the mathematical guarantees that can be made for the performance of various communication and computational challenges. However, in our research, we focus on a different question. For us, the fundamental security question is one that end-users routinely encounter and resolve for themselves many times a day - the question of whether a system is secure enough for their immediate needs. In this paper, we will describe our explorations of this issue. In particular, we will draw on three major elements of our research to date. The first is empirical investigation into everyday security practices, looking at how people manage security as a practical, day-to-day concern, and exploring the context in which security decisions are made. This empirical work provides a foundation for our reconsideration of the problems of security to a large degree as an interactional problem. The second is our systems approach, based on visualization and event-based architectures. This technical approach provides a broad platform for investigating security and interaction, based on a set of general principles. The third is our initial experiences in a prototype deployment of these mechanisms in an application for peer-to-peer file sharing in face-to-face collaborative settings. We have been using this application as the basis of an initial evaluation of our technology in support of everyday security practices in collaborative workgroups.

• Item Type: Articles
• Additional Information: This work was supported in part by the National Science Foundation under awards 0133749, 0205724 and 0326105, and by a grant from Intel Corporation.
• Status: Published
• Refereed: Yes
• Glasgow Author(s) Enlighten ID: Ding, Dr Sharon
• Authors: De Paula, R., Ding, X., Dourish, P., Nies, K., Pillet, B., Redmiles, D.F., Ren, J., Rode, J.A., and Silva Filho, R.
• College/School: College of Science and Engineering > School of Computing Science
• Journal Name: International Journal of Human-Computer Studies
• Publisher: Elsevier
• ISSN: 1071-5819
• ISSN (Online): 1095-9300

Related URLs

• Other