Modeling and enforcing access control policies in conversational user interfaces - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Software and Systems Modeling Année : 2023

Modeling and enforcing access control policies in conversational user interfaces

Résumé

Conversational user interfaces (CUIs), such as chatbots, are becoming a common component of many software systems. Although they are evolving in many directions (such as advanced language processing features, thanks to new AI-based developments), less attention has been paid to access control and other security concerns associated with CUIs, which may pose a clear risk to the systems they interface with. In this paper, we apply model-driven techniques to model and enforce access-control policies in CUIs. In particular, we present a fully fledged framework to integrate the role-based access-control (RBAC) protocol into CUIs by: (1) modeling a set of access-control rules to specify permissions over the bot resources using a domain-specific language that tailors core RBAC concepts to the CUI domain; and (2) describing a mechanism to show the feasibility of automatically generating the infrastructure to evaluate and enforce the modeled access control policies at runtime.
Fichier principal
Vignette du fichier
s10270-023-01131-3.pdf (1.7 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04308465 , version 1 (05-02-2024)

Licence

Paternité

Identifiants

Citer

Elena Planas, Salvador Martínez, Marco Brambilla, Jordi Cabot. Modeling and enforcing access control policies in conversational user interfaces. Software and Systems Modeling, 2023, ⟨10.1007/s10270-023-01131-3⟩. ⟨hal-04308465⟩
28 Consultations
5 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More