TC: Small: Collaborative Research: An Argumentation-based Framework for Security Management

TC：小型：协作研究：基于论证的安全管理框架

• 批准号: 1118077
• 负责人: Karl Levitt
• 金额: $ 24.9万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-08-01 至 2015-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1118077&HistoricalAwards=false
• 关键词: TC; Small; Collaborative; Research; Argumentation

Computer users are increasingly faced with decisions that impact their personal privacy and the security of the systems they manage. The range of users confronting these challenges has broadened from the early days of computing to include everyone from home users to administrators of large enterprise networks. Privacy policies are frequently obscure, and security settings are typically complex. Missing from the options presented to a user is a decision support mechanism that can assist her in making informed choices. Being presented with the consequences of decisions she is asked to make, among other information, is a necessary component that is currently lacking.This work introduces formal argumentation as a framework for helping users make informed decisions about the security of their computer systems and the privacy of their electronically stored information. Argumentation, a mature theoretical discipline, provides a mechanism for reaching substantiated conclusions when faced with incomplete and inconsistent information. It provides the basis for presenting arguments to a user for or against a position, along with well-founded methods for assessing the outcome of interactions among the arguments. An elegant theory of argumentation has been developed based on meta rules characterizing relationships between arguments. Rules for argument construction and evaluation have been devised for specific domains such as medical diagnosis. This project investigates argumentation as the basis for helping users make informed security- and privacy-related decisions about their computer systems. Three specific aims are addressed:1) Implementation of an inference engine that reasons using argumentation,2) Facilitate security management through an argumentation inference engine, a rule base specialized for security management, and sensors providing security alerts all enhanced with an interactive front-end.3) Reason about the consistency and completeness of domain knowledge, as it evolves.To understand the kinds of domain-specific inference rules required, diverse security applications are studied, such as determining if an attack imperils a particular system, finding the root cause of an attack, deciding on appropriate actions to take in the presence of an uncertain diagnosis of an attack, and deciding on privacy settings. Emerging from this project will be a prototype towards the practice of usable security. The team is working with organizations responsible for the security administration of large enterprise networks and will make the prototype tools available to these organizations. The team is working with everyday users from a cross-section of community members. Curricular modules that cover the intersection of argumentation and security are being developed and shared.

计算机用户越来越面临影响其个人隐私和管理系统安全性的决策。面临这些挑战的用户范围从计算的早期开始扩展，包括从家庭用户到大型企业网络管理员的每个人。隐私政策通常是晦涩的，安全设置通常很复杂。从提供给用户的选项中缺少的是一种决策支持机制，可以帮助她做出明智的选择。除其他信息外，还要求她要求做出决定的后果，这是目前缺乏的必要组成部分。这项工作介绍了正式的论证，作为帮助用户对其计算机系统安全性以及其电子存储信息隐私的明智决定的框架。辩论是一门成熟的理论学科，在面对不完整和不一致的信息时提供了一种实现结论的机制。它为向用户提出参数的基础提供了基础，并与一个有充分的方法评估参数之间相互作用的结果。基于表征参数之间关系的元规则，已经开发了一种优雅的论证理论。为特定领域（例如医学诊断）设计了论证构建和评估规则。该项目调查论点是帮助用户对其计算机系统做出明智的安全性和隐私相关的决定的基础。解决了三个具体目的：1）实施推理引擎的实施，该推理引擎使用论证，2）通过论证推理引擎来促进安全管理，一个专门用于安全管理的规则基础以及提供安全性的传感器都通过交互式前端增强了所有人。攻击会损害特定的系统，找到攻击的根本原因，决定在不确定攻击的不确定诊断并决定隐私设置的情况下采取适当的行动。该项目的出现将是实践可用安全性的原型。该团队正在与负责大型企业网络安全管理的组织合作，并将使这些组织的原型工具可用。该团队正在与社区成员横截面的日常用户合作。正在开发和共享涵盖论证与安全交集的课程模块。