: © Making Policy Decisions Disappear into the User's Workflow Alan H. Karp, Marc Stiegler HP Laboratories HPL-2009-341 Usable security Complaints of security interfering with getting work done are commonplace. They often arise when users are distracted from their tasks to make policy decisions. We have identified what is missing from earlier security interaction designs that leads to these interruptions. Explicitly representing policy decisions in the user interface and pro-viding controls for changing those policies has allowed us to reliably infers users' desired policy decisions from actions they take to get their work done. This paper describes the underlying principles and how they resulted in an interaction design that never interferes with the user's work. External Posting Date: October 6, 2009 [Fulltext] Approved for External Publication Internal Posting Date: October 6, 2009 [Fulltext] Copyright 2009 Hewlett-Packard Development Company, L.P.
Alan H. Karp, Marc Stiegler