Sie befinden Sich nicht im Netzwerk der Universität Paderborn. Der Zugriff auf elektronische Ressourcen ist gegebenenfalls nur via VPN oder Shibboleth (DFN-AAI) möglich. mehr Informationen...
A Methodology for Aligning Usability and Security in Systems and Services
Ist Teil von
2018 3rd International Conference on Information Systems Engineering (ICISE), 2018, p.61-66
Ort / Verlag
IEEE
Erscheinungsjahr
2018
Quelle
IEEE/IET Electronic Library
Beschreibungen/Notizen
Conflict between usability and security is a widely recognized research problem in industry and academia. Failure to design systems, which are simultaneously usable and secure, may cause incidents where human errors lead to security breaches. Academic research identifies that usability versus security conflict can be best handled at the requirement and design stage of system development. However, there exist no practical solutions to incorporate usability and security during requirements and design stage of system development specifically in case of information systems. This paper is an attempt in this regard i.e. to incorporate the human factors (usability) while designing security features of the system. The main contribution of this paper is a novel methodology to handle usability versus security conflict during the early stages of system development, and documenting them in form of design patterns for reuse. We also present an instance of usable security design pattern.