NDLI: Laissez-faire file sharing: access control designed for individuals at the endpoints

Please wait, while we are loading the content...

Laissez-faire file sharing: access control designed for individuals at the endpoints

What is the shape of your security policy?: security as a classification problem

Generative usability: security and user centered design beyond the appliance

Quis Custodiet ipsos Custodes?: a new paradigm for analyzing security paradigms with appreciation to the Roman poet Juvenal

Musipass: authenticating me softly with "my" song

A reinforcement model for collaborative security and Its formal analysis

Fluid information systems

So long, and no thanks for the externalities: the rational rejection of security advice by users

Server-side detection of malware infection

Quantified security is a weak hypothesis: a critical survey of results and assumptions

The sisterhood of the traveling packets

Securing data through avoidance routing

Laissez-faire file sharing: access control designed for individuals at the endpoints

Content Provider	ACM Digital Library
Author	Bellovin, Steven M. Johnson, Maritza L. Reeder, Robert W. Schechter, Stuart E.
Abstract	When organizations deploy file systems with access control mechanisms that prevent users from reliably sharing files with others, these users will inevitably find alternative means to share. Alas, these alternatives rarely provide the same level of confidentiality, integrity, or auditability provided by the prescribed file systems. Thus, the imposition of restrictive mechanisms and policies by system designers and administrators may actually reduce the system's security. We observe that the failure modes of file systems that enforce centrally-imposed access control policies are similar to the failure modes of centrally planned economies: individuals either learn to circumvent these restrictions as matters of necessity or desert the system entirely, subverting the goals behind the central policy. We formalize requirements for laissez-faire sharing, which parallel the requirements of free market economies, to better address the file sharing needs of information workers. Because individuals are less likely to feel compelled to circumvent systems that meet these laissez-faire requirements, such systems have the potential to increase both productivity and security.
Starting Page	1
Ending Page	10
Page Count	10
File Format	PDF
ISBN	9781605588452
DOI	10.1145/1719030.1719032
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-09-08
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Access control management File sharing
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in