Interactive Graphical Access Control Tools

Abstract

Access control (AC) policy creation and implementation is challenging because of its complex structure and specifications. This paper explores the potential of two novel interactive graphical displays whose design draws upon alternative principles of effective interface design. One tool (CDAC) exploits the power of Euler diagrams to visualize information and interrelate an organization's management structure and details of the file structure of digital resources. The other tool (DMAC) deploys a diagrammatic matrix to coordinate permissions allocations into a context of structural information. The third tool (SLAC) utilized a conventional visualization and served as the control group for comparison against the other two tools. An experiment with 91 relatively novice participants demonstrates that both tools, even with minimal training, support users' comprehension of AC policies and their implementation, as well as a more familiar traditional design of AC tools.