Smart cyber-physical systems : beyond usable security to security ergonomics by design

Craggs, Barnaby and Rashid, Awais (2017) Smart cyber-physical systems : beyond usable security to security ergonomics by design. In: 3rd International Workshop on Software Engineering for Smart Cyber-Physical Systems (SEsCPS'17) : held in conjunction with International Conference on Software Engineering (ICSE), Buenos Aires, Argentina, 21 May 2017. IEEE, pp. 22-25. ISBN 9781538640449

[thumbnail of PID4666301]
Preview
PDF (PID4666301)
PID4666301.pdf - Accepted Version
Available under License Creative Commons Attribution-NonCommercial.

Download (375kB)

Abstract

Securing cyber-physical systems is hard. They are complex infrastructures comprising multiple technological artefacts, designers, operators and users. Existing research has established the security challenges in such systems as well as the role of usable security to support humans in effective security decisions and actions. In this paper we focus on smart cyberphysical systems, such as those based on the Internet of Things (IoT). Such smart systems aim to intelligently automate a variety of functions, with the goal of hiding that complexity from the user. Furthermore, the interactions of the user with such systems are more often implicit than explicit, for instance, a pedestrian with wearables walking through a smart city environment will most likely interact with the smart environment implicitly through a variety of inferred preferences based on previously provided or automatically collected data. The key question that we explore is that of empowering software engineers to pragmatically take into account how users make informed security choices about their data and information in such a pervasive environment. We discuss a range of existing frameworks considering the impact of automation on user behaviours and argue for the need of a shift—from usability to security ergonomics as a key requirement when designing and implementing security features in smart cyber-physical environments. Of course, the considerations apply more broadly than security but, in this paper, we focus only on security as a key concern.

Item Type:
Contribution in Book/Report/Proceedings
Additional Information:
©2017 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
Subjects:
?? securityergonomicscyber-physical systems ??
ID Code:
84976
Deposited By:
Deposited On:
01 Mar 2017 13:52
Refereed?:
Yes
Published?:
Published
Last Modified:
05 Sep 2024 23:45