A model of triangulating environments for policy authoring

Policy authors typically reconcile several different mental models and goals, such as enabling collaboration, securing information, and conveying trust in colleagues. The data underlying these models, such as which roles are more trusted than others, isn’t generally used to define policy rules. As a result, policy-management environments don’t gather this information; in turn, they fail to exploit it to help users check policy decisions against their multiple perspectives. We present a model of triangulating authoring environments that capture the data underlying these different perspectives, and iteratively sanity-check policy decisions against this information while editing. We also present a tool that consumes instances of the model and automatically generates prototype authoring tools for the described domain. Categories and Subject Descriptors D.2.1 [Software Engineering]: Requirements/Specifications General Terms Design, Security Keywords Policy authoring, Authoring envi...

• Type: Conference
• Year: 2010
• Where: SACMAT
• Authors: Kathi Fisler, Shriram Krishnamurthi
• Keywords: Control Systems, Environments Don’t Gather, Policy, Policy Decisions, SACMAT 2010