Service security and privacy as a socio-technical problem.
Saved in:
| Title: | Service security and privacy as a socio-technical problem. |
|---|---|
| Authors: | Bella, Giampaolo1 giamp@dmi.unict.it, Curzon, Paul2 p.curzon@qmul.ac.uk, Lenzini, Gabriele3 gabriele.lenzini@uni.lu |
| Source: | Journal of Computer Security. 2015, Vol. 23 Issue 6, p563-585. 23p. |
| Subjects: | Computer security research, Cloud computing, Internet security, Right of privacy, Computer simulation |
| Abstract: | The security and privacy of the data that users transmit, more or less deliberately, to modern services is an open problem. It is not solely limited to the actual Internet traversal, a sub-problem vastly tackled by consolidated research in security protocol design and analysis. By contrast, it entails much broader dimensions pertaining to how users approach technology and understand the risks for the data they enter. For example, users may express cautious or distracted personas depending on the service and the point in time; further, pre-established paths of practice may lead them to neglect the intrusive privacy policy offered by a service, or the outdated protections adopted by another. The approach that sees the service security and privacy problem as a socio-technical one needs consolidation. With this motivation, the article makes a threefold contribution. It reviews the existing literature on service security and privacy, especially from the socio-technical standpoint. Further, it outlines a general research methodology aimed at layering the problem appropriately, at suggesting how to position existing findings, and ultimately at indicating where a transdisciplinary task force may fit in. The article concludes with the description of the three challenge domains of services whose security and privacy we deem open socio-technical problems, not only due to their inherent facets but also to their huge number of users. [ABSTRACT FROM AUTHOR] |
| Copyright of Journal of Computer Security is the property of Sage Publications Inc. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Database: | Engineering Source |
| FullText | Links: – Type: pdflink Text: Availability: 0 |
|---|---|
| Header | DbId: egs DbLabel: Engineering Source An: 111193259 AccessLevel: 6 PubType: Academic Journal PubTypeId: academicJournal PreciseRelevancyScore: 0 |
| IllustrationInfo | |
| Items | – Name: Title Label: Title Group: Ti Data: Service security and privacy as a socio-technical problem. – Name: Author Label: Authors Group: Au Data: <searchLink fieldCode="AR" term="%22Bella%2C+Giampaolo%22">Bella, Giampaolo</searchLink><relatesTo>1</relatesTo><i> giamp@dmi.unict.it</i><br /><searchLink fieldCode="AR" term="%22Curzon%2C+Paul%22">Curzon, Paul</searchLink><relatesTo>2</relatesTo><i> p.curzon@qmul.ac.uk</i><br /><searchLink fieldCode="AR" term="%22Lenzini%2C+Gabriele%22">Lenzini, Gabriele</searchLink><relatesTo>3</relatesTo><i> gabriele.lenzini@uni.lu</i> – Name: TitleSource Label: Source Group: Src Data: <searchLink fieldCode="JN" term="%22Journal+of+Computer+Security%22">Journal of Computer Security</searchLink>. 2015, Vol. 23 Issue 6, p563-585. 23p. – Name: Subject Label: Subjects Group: Su Data: <searchLink fieldCode="DE" term="%22Computer+security+research%22">Computer security research</searchLink><br /><searchLink fieldCode="DE" term="%22Cloud+computing%22">Cloud computing</searchLink><br /><searchLink fieldCode="DE" term="%22Internet+security%22">Internet security</searchLink><br /><searchLink fieldCode="DE" term="%22Right+of+privacy%22">Right of privacy</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+simulation%22">Computer simulation</searchLink> – Name: Abstract Label: Abstract Group: Ab Data: The security and privacy of the data that users transmit, more or less deliberately, to modern services is an open problem. It is not solely limited to the actual Internet traversal, a sub-problem vastly tackled by consolidated research in security protocol design and analysis. By contrast, it entails much broader dimensions pertaining to how users approach technology and understand the risks for the data they enter. For example, users may express cautious or distracted personas depending on the service and the point in time; further, pre-established paths of practice may lead them to neglect the intrusive privacy policy offered by a service, or the outdated protections adopted by another. The approach that sees the service security and privacy problem as a socio-technical one needs consolidation. With this motivation, the article makes a threefold contribution. It reviews the existing literature on service security and privacy, especially from the socio-technical standpoint. Further, it outlines a general research methodology aimed at layering the problem appropriately, at suggesting how to position existing findings, and ultimately at indicating where a transdisciplinary task force may fit in. The article concludes with the description of the three challenge domains of services whose security and privacy we deem open socio-technical problems, not only due to their inherent facets but also to their huge number of users. [ABSTRACT FROM AUTHOR] – Name: AbstractSuppliedCopyright Label: Group: Ab Data: <i>Copyright of Journal of Computer Security is the property of Sage Publications Inc. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.) |
| PLink | https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=111193259 |
| RecordInfo | BibRecord: BibEntity: Identifiers: – Type: doi Value: 10.3233/JCS-150536 Languages: – Code: eng Text: English PhysicalDescription: Pagination: PageCount: 23 StartPage: 563 Subjects: – SubjectFull: Computer security research Type: general – SubjectFull: Cloud computing Type: general – SubjectFull: Internet security Type: general – SubjectFull: Right of privacy Type: general – SubjectFull: Computer simulation Type: general Titles: – TitleFull: Service security and privacy as a socio-technical problem. Type: main BibRelationships: HasContributorRelationships: – PersonEntity: Name: NameFull: Bella, Giampaolo – PersonEntity: Name: NameFull: Curzon, Paul – PersonEntity: Name: NameFull: Lenzini, Gabriele IsPartOfRelationships: – BibEntity: Dates: – D: 01 M: 08 Text: 2015 Type: published Y: 2015 Identifiers: – Type: issn-print Value: 0926227X Numbering: – Type: volume Value: 23 – Type: issue Value: 6 Titles: – TitleFull: Journal of Computer Security Type: main |
| ResultId | 1 |
