An empirical study of three access control systems

Authors:
Lihui Hu;Jean Mayo;Charles Wallace
Affiliations:
Michigan Technological University, Rockville, MD;Michigan Technological University, Houghton, Michigan;Michigan Technological University, Houghton, Michigan
Venue:
Proceedings of the 6th International Conference on Security of Information and Networks
Year:
2013

Citing 8
Cited 0

Intentional access management: making access control usable for end-users

SOUPS '06 Proceedings of the second symposium on Usable privacy and security
Security Engineering: A Guide to Building Dependable Distributed Systems

Security Engineering: A Guide to Building Dependable Distributed Systems
Usability meets access control: challenges and research opportunities

Proceedings of the 14th ACM symposium on Access control models and technologies
How users use access control

Proceedings of the 5th Symposium on Usable Privacy and Security
Access Control for Home Data Sharing: Attitudes, Needs and Practices

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Do windows users follow the principle of least privilege?: investigating user account control practices

Proceedings of the Sixth Symposium on Usable Privacy and Security
Empowering End Users to Confine Their Own Applications: The Results of a Usability Study Comparing SELinux, AppArmor, and FBAC-LSM

ACM Transactions on Information and System Security (TISSEC)
Android permissions: user attention, comprehension, and behavior

Proceedings of the Eighth Symposium on Usable Privacy and Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Access control systems are a key component of computer system security. This paper presents the results of an effort to understand the usability of current access control systems. A study was conducted to observe users of three access control systems: UNIX discretionary access control (DAC), SELinux, and a novel access control system, a File System Firewall (FSF), which we have designed and implemented. Several recommendations for improving user experiences with access control systems are presented based on our analysis of the study results.