Making Policy Decisions Disappear into the User's Workflow
Karp, Alan H.; Stiegler, Marc
Keyword(s): Usable security
Abstract: Complaints of security interfering with getting work done are commonplace. They often arise when users are distracted from their tasks to make policy decisions. We have identified what is missing from earlier security interaction designs that leads to these interruptions. Explicitly representing policy decisions in the user interface and pro-viding controls for changing those policies has allowed us to reliably infers users' desired policy decisions from actions they take to get their work done. This paper describes the underlying principles and how they resulted in an interaction design that never interferes with the user's work.
External Posting Date: October 6, 2009 [Fulltext]. Approved for External Publication
Internal Posting Date: October 6, 2009 [Fulltext]