TC: Small: Collaborative Research: An Argumentation-based Framework for Security Management

TC：小型：协作研究：基于论证的安全管理框架

• 批准号: 1118077
• 负责人: Karl Levitt
• 金额: $ 24.9万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-08-01 至 2015-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1118077&HistoricalAwards=false
• 关键词: TC; Small; Collaborative; Research; Argumentation

Computer users are increasingly faced with decisions that impact their personal privacy and the security of the systems they manage. The range of users confronting these challenges has broadened from the early days of computing to include everyone from home users to administrators of large enterprise networks. Privacy policies are frequently obscure, and security settings are typically complex. Missing from the options presented to a user is a decision support mechanism that can assist her in making informed choices. Being presented with the consequences of decisions she is asked to make, among other information, is a necessary component that is currently lacking.This work introduces formal argumentation as a framework for helping users make informed decisions about the security of their computer systems and the privacy of their electronically stored information. Argumentation, a mature theoretical discipline, provides a mechanism for reaching substantiated conclusions when faced with incomplete and inconsistent information. It provides the basis for presenting arguments to a user for or against a position, along with well-founded methods for assessing the outcome of interactions among the arguments. An elegant theory of argumentation has been developed based on meta rules characterizing relationships between arguments. Rules for argument construction and evaluation have been devised for specific domains such as medical diagnosis. This project investigates argumentation as the basis for helping users make informed security- and privacy-related decisions about their computer systems. Three specific aims are addressed:1) Implementation of an inference engine that reasons using argumentation,2) Facilitate security management through an argumentation inference engine, a rule base specialized for security management, and sensors providing security alerts all enhanced with an interactive front-end.3) Reason about the consistency and completeness of domain knowledge, as it evolves.To understand the kinds of domain-specific inference rules required, diverse security applications are studied, such as determining if an attack imperils a particular system, finding the root cause of an attack, deciding on appropriate actions to take in the presence of an uncertain diagnosis of an attack, and deciding on privacy settings. Emerging from this project will be a prototype towards the practice of usable security. The team is working with organizations responsible for the security administration of large enterprise networks and will make the prototype tools available to these organizations. The team is working with everyday users from a cross-section of community members. Curricular modules that cover the intersection of argumentation and security are being developed and shared.

计算机用户越来越多地面临影响其个人隐私及其管理系统安全的决策。面临这些挑战的用户范围已经从计算的早期扩大到包括从家庭用户到大型企业网络管理员的每个人。隐私政策常常晦涩难懂，安全设置通常也很复杂。呈现给用户的选项中缺少可以帮助她做出明智选择的决策支持机制。除其他信息外，向她提出要求做出的决定的后果是目前所缺乏的必要组成部分。这项工作引入了正式论证作为框架，帮助用户就其计算机系统的安全性和隐私做出明智的决定他们的电子存储信息。论证是一门成熟的理论学科，它提供了一种在面对不完整和不一致的信息时得出经证实的结论的机制。它提供了向用户提出支持或反对某一立场的论据的基础，以及评估论据之间相互作用的结果的有根据的方法。一种优雅的论证理论是基于描述论证之间关系的元规则而发展起来的。论证构建和评估的规则是针对特定领域（例如医学诊断）设计的。该项目将论证作为帮助用户对其计算机系统做出明智的安全和隐私相关决策的基础进行研究。解决了三个具体目标：1) 实现使用论证进行推理的推理引擎，2) 通过论证推理引擎、专门用于安全管理的规则库以及提供安全警报的传感器来促进安全管理，所有这些都通过交互式前端得到增强.3）关于领域知识不断发展的一致性和完整性的原因。为了了解所需的特定领域推理规则的种类，研究了不同的安全应用程序，例如确定攻击是否危及特定系统，查找根本原因的攻击，决定在攻击诊断不确定的情况下采取适当的行动，并决定隐私设置。该项目将产生可用安全实践的原型。该团队正在与负责大型企业网络安全管理的组织合作，并将向这些组织提供原型工具。该团队正在与来自各个社区成员的日常用户合作。涵盖论证和安全交叉点的课程模块正在开发和共享。