SCIENCE@home

VisABAC: A Tool for Visualising ABAC Policies

Charles Morisset,David Sánchez

Published 2018 in International Conference on Information Systems Security and Privacy

ABSTRACT

Authoring and editing access control policy can be a complex and cognitive demanding task, especially when dealing with a large number of rules and attributes. Visualisation techniques are known to be helpful to users analysing intricate data, and can, in some contexts, help decreasing the cognitive load. In this paper, we propose a new tool, VisABAC, which enables the visualisation of attribute based access control policies using the Circle Packing method. We used a participatory design, following a survey of existing visualisation methods in access control. VisABAC is designed as a web-page component, developed in Javascript using the D3.js library, and as such is easily usable without requiring any particular setup. In addition to presenting VisABAC, we demonstrate its usability by conducting a controlled experiment with 32 participants, asking them to change some attribute values in order to obtain a given decision for a policy, and measuring the time taken by participants to conduct these tasks (the faster, the better). We show a small to medium effect size (d = 0.44), thus indicating that VisABAC is a promising tool for authoring and editing access control policies.

PUBLICATION RECORD

  • Publication year

    2018

  • Venue

    International Conference on Information Systems Security and Privacy

  • Publication date

    Unknown publication date

  • Fields of study

    Computer Science

  • Identifiers
    DOI 10.5220/0006647401170126
  • External record

    Open on Semantic Scholar

  • Source metadata

    Semantic Scholar

CITATION MAP

EXTRACTION MAP

CLAIMS

  • No claims are published for this paper.

CONCEPTS

  • No concepts are published for this paper.

REFERENCES

Showing 1-29 of 29 references · Page 1 of 1

CITED BY

Showing 1-6 of 6 citing papers · Page 1 of 1