Soramame: what you see is what you control access control user interface

Authors:
Nachi Ueno;Ryota Hashimoto;Michio Shimomura;Kenji Takahashi
Affiliations:
NTT Information Sharing Platform Laboratories, Musashino-shi, Tokyo, Japan;NTT Information Sharing Platform Laboratories, Musashino-shi, Tokyo, Japan;NTT Information Sharing Platform Laboratories, Musashino-shi, Tokyo, Japan;NTT Information Sharing Platform Laboratories, Musashino-shi, Tokyo, Japan
Venue:
Proceedings of the Symposium on Computer Human Interaction for the Management of Information Technology
Year:
2009

Citing 4
Cited 2

Privacy in information technology: designing to enable privacy policy management in organizations

International Journal of Human-Computer Studies - Special isssue: HCI research in privacy and security is critical now
Why Johnny can't encrypt: a usability evaluation of PGP 5.0

SSYM'99 Proceedings of the 8th conference on USENIX Security Symposium - Volume 8
Expressions of expertness: the virtuous circle of natural language for access control policy specification

Proceedings of the 4th symposium on Usable privacy and security
What's in a mashup? And why? Studying the perceptions of web-active end users

VLHCC '08 Proceedings of the 2008 IEEE Symposium on Visual Languages and Human-Centric Computing

Filter-based access control model: exploring a more usable database management

Proceedings of the 4th Symposium on Computer Human Interaction for the Management of Information Technology
A visualization tool for evaluating access control policies in facebook-style social network systems

Proceedings of the 27th Annual ACM Symposium on Applied Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

We discuss the design of a novel tool for usable and secure access control named Soramame. We focused on the user problem of creating a mental model of access control. To help better create mental models, we propose using Soramame. Soramame is a WYSWYC (What You See is What You Control) access control user interface. It extracts and visualizes the data-flows of access control policies and uses animation to help users better understand the policies.