Formal Analysis of Security in Interactive Systems

2009 ◽  
pp. 415-432 ◽  
Author(s):  
Antonio Cerone
Keyword(s):  
Human Error ◽  
User Behavior ◽  
System Development ◽  
Formal Analysis ◽  
Interactive Systems ◽  
Security Protocol ◽  
Human Interaction ◽  
Formal Modeling ◽  
Human Errors ◽  
Modeling And Analysis

Reducing the likelihood of human error in the use of interactive systems is increasingly important. Human errors could not only hinder the correct use and operation, they can also compromise the safety and security of such systems. Hence the need for formal methods to analyze and verify the correctness of interactive systems, particularly with regards to human interaction. This chapter examines the use of formal modeling and analysis of security properties of interactive systems. The reader is introduced to some basic concepts in security and human-computer interaction, followed by formal modeling of human cognitive behavior and analysis of such systems. Authors highlight the use of model-checking to drive the system development to design secure user actions and sequences of actions. Authors also analyze the patterns of user behavior that may lead to security violation. Finally, particular areas of security protocol design where human interaction plays a key role are discussed.

The Human Factors Issues in Information Security: What are They and Do They Matter?

1998 ◽  
Vol 42 (4) ◽  
pp. 439-443
Author(s):  
Pamela R. McCauley-Bell ◽  
Lesia L. Crumpton
Keyword(s):  
Information Technology ◽  
Information Systems ◽  
Information Security ◽  
Human Factors ◽  
Human Error ◽  
System Security ◽  
Security Protocol ◽  
Human Interaction ◽  
Security Issues

The information technology field has been increasingly plagued by threats to the security of information systems, networks, and communication media. The solutions to these problems have primarily focused on the techniques to more closely safeguard networks (i.e. firewalls) with similar efforts being put into assessing the vulnerabilities of the hardware and software aspects of the systems. With the exception of discussions into more creative password selection, discussion pertaining to the role of the user, can play in reducing the risk of human error and thus promoting system security has been extremely limited. This lecture will present an overview of information security issues impacted by human interaction that may or may not play a role in promoting system security. Understanding that information systems are in fact composed of hardware and software components which must be addressed using traditional information security protocol, this lecture will provide an understanding of the possible risk that the human/user poses to an information system. Once the risks or factors associated with the human in the security of the system are identified, the next question is do the factors matter? The objective of this lecture is to present an intellectual discussion of human factors issues and their impact on information security. This is an important discussion topic that the information technology field can not afford to ignore.

The Intersection of Advancing Technology and Human Performance

2020 ◽  
Vol 7 (1) ◽  
Author(s):  
Jonathan K. Corrado
Keyword(s):  
Human Factors ◽  
Human Error ◽  
Human Performance ◽  
The United States ◽  
Human Interaction ◽  
Advanced Technology ◽  
Nuclear Facilities ◽  
Human Errors ◽  
Processing Technologies ◽  
The Impact

Abstract Today's sensory and processing technologies are perceptive and precise. They can discern the environment, solve complicated problems, make assessments, and learn from experience. Although they do not think the way humans do, they can replicate many human intellectual aptitudes. Throughout the last several decades, companies have implemented advanced technology and increasingly removed the human from many aspects of nuclear operation. There are many advantages to this transition, but, like any system modification, failures inevitably manifest. In the instance of this article, human errors have resulted and have accounted for several accidents at nuclear facilities in the United States due to this transition. The accidents at these facilities due to human error often result in plant shutdowns, unnecessary expenses, and have the capacity to be problematic for people, the facilities, and environments. This article explores the context surrounding the complexity of changing technologies at the nuclear facilities and the potential exacerbation of problems caused by human error when technology advancements concerning operator interaction with control systems are implemented. To understand the complexity surrounding the human interaction with advancing technologies, the concepts of human performance and human factors are examined and then the impact of these concepts within the framework of advancing technology are applied to the operation of nuclear facilities. This review draws attention to the vulnerabilities due to human error at nuclear facilities within the context of continually advancing technology and sheds insight on the role human performance and human factors have on system design and the resulting outcome.

The Function-Human Error Design Method (FHEDM)

2018 ◽  
Author(s):  
Nicolás F. Soria Zurita ◽  
Robert B. Stone ◽  
Onan Demirel ◽  
Irem Y. Tumer
Keyword(s):  
Human Error ◽  
Failure Modes ◽  
Design Method ◽  
Human Interaction ◽  
Human Errors ◽  
Minimum Number ◽  
Potential Failure ◽  
Human Function ◽  
Product Interaction ◽  
Novel Design

During the design of products and systems, engineers must quickly and accurately satisfy customer needs while adequately developing the required system functions with the minimum number of failures. Identifying potential failure modes during early design stages is essential to create reliable designs. Different engineering methodologies such as Failure Modes and Effects Analysis (FMEA), allows engineers to identify how a set of components could fail. These methods are popular and commonly used in industry. However, such methodologies fail to recognize potential failure modes caused by human-product interaction. During the design of products, there is often a lack of sufficient attention to the human-product interaction. Even though human factors are considered during the design process, most of the design approaches fail to incorporate the human interaction correctly. In this research, we explore the implementation of a novel design methodology named Function-Human Error Design Method (FHEDM), which identifies possible generic human errors while completing a functional decomposition of the product. This method will provide engineers with useful information about potential failure modes caused by human-function interaction during early conceptual design.

scholarly journals Balancing the formal and the informal in user-centred design

2021 ◽  
Author(s):  
Michael D Harrison ◽  
Paolo Masci ◽  
José Creissac Campos
Keyword(s):  
Formal Methods ◽  
Systematic Approach ◽  
Formal Analysis ◽  
Interactive Systems ◽  
User Evaluation ◽  
Analysis Techniques ◽  
User Centred Design ◽  
Early Design Stages ◽  
Cooperative Evaluation

Abstract This paper explores the role of formal methods as part of the user-centred design of interactive systems. An iterative process is described, developing prototypes incrementally, proving user-centred requirements while at the same time evaluating the prototypes that are executable forms of the developed models using ‘traditional’ techniques for user evaluation. A formal analysis complements user evaluations. This approach enriches user-centred design that typically focuses understanding on context and producing sketch designs. These sketches are often non-functional (e.g. paper) prototypes. They provide a means of exploring candidate design possibilities using techniques such as cooperative evaluation. This paper describes a further step in the process using formal analysis techniques. The use of formal methods provides a systematic approach to checking plausibility and consistency during early design stages, while at the same time enabling the generation of executable prototypes. The technique is illustrated through an example based on a pill dispenser.

scholarly journals Formal modeling and analysis of RAMP transaction systems

2016 ◽  
Author(s):  
Si Liu ◽  
Peter Csaba Ölveczky ◽  
Muntasir Raihan Rahman ◽  
Jatin Ganhotra ◽  
Indranil Gupta ◽  
...  
Keyword(s):  
Formal Modeling ◽  
Modeling And Analysis

An Integrated Framework for the Formal Analysis of Critical Interactive Systems

2020 ◽  
Author(s):  
Ismail Mendil ◽  
Neeraj Kumar Singh ◽  
Yamine Ait-Ameur ◽  
Dominique Mery ◽  
Philippe Palanque
Keyword(s):  
Formal Analysis ◽  
Interactive Systems ◽  
Integrated Framework

Case Study: Developing an Operations Concept for Future Air Traffic Control

1986 ◽  
Vol 30 (6) ◽  
pp. 585-589
Author(s):  
Elizabeth D. Murphy ◽  
William D. Coleman ◽  
Lisa J. Stewart ◽  
Sylvia B. Sheppard
Keyword(s):  
Traffic Control ◽  
Interaction Design ◽  
Air Traffic Control ◽  
System Development ◽  
Air Traffic ◽  
Human Interaction ◽  
Early Application ◽  
Analysis Process ◽  
Human Decision ◽  
Continuous User

A task identification, sequencing, and analysis process defined the operational requirements of automated capabilities proposed to support human decision making in future air traffic control. Active and continuous user group involvement was a key feature of this process. Results indicate that information necessary for effective computer-human interaction design can be generated in the early phases of system development. Early application of structured engineering techniques and human factors methods leads to a better understanding of the proposed capabilities and to better communication between the users and designers of a system.

Causes of Structural Failures with Steel Structures

2017 ◽  
Author(s):  
Goran Alpsten
Keyword(s):  
Structural Damage ◽  
Human Error ◽  
Structural Reliability ◽  
Steel Structures ◽  
Fatigue Loading ◽  
Structural Instability ◽  
Human Errors ◽  
Collapse Mode ◽  
Load Carrying ◽  
Structural Failures

This paper is based on the experience from investigating over 400 structural collapses, incidents and serious structural damage cases with steel structures which have occurred over the past four centuries. The cause of the failures is most often a gross human error rather than a combination of “normal” variations in parameters affecting the load-carrying capacity, as considered in normal design procedures and structural reliability analyses. Human errors in execution are more prevalent as cause for the failures than errors in the design process, and the construction phase appears particularly prone to human errors. For normal steel structures with quasi-static (non-fatigue) loading, various structural instability phenomena have been observed to be the main collapse mode. An important observation is that welds are not as critical a cause of structural steel failures for statically loaded steel structures as implicitly understood in current regulations and rules for design and execution criteria.

Sign in / Sign up

Export Citation Format

Share Document