Modeling and enforcing access control policies in conversational user interfaces

Conversational user interfaces (CUIs), such as chatbots, are becoming a common component of many software systems. Although they are evolving in many directions (such as advanced language processing features, thanks to new AI-based developments), less attention has been paid to access control and ot...

ver descrição completa

Detalhes bibliográficos
Autores: Planas, Elena, Martínez, Salvador, Brambilla, Marco, Cabot, Jordi
Formato: artículo
Estado:Versión publicada
Fecha de publicación:2023
País:España
Recursos:Universitat Oberta de Catalunya (UOC)
Repositorio:O2, repositorio institucional de la UOC
OAI Identifier:oai:openaccess.uoc.edu:10609/150268
Acesso em linha:http://hdl.handle.net/10609/150268
https://doi.org/10.1007/s10270-023-01131-3
Access Level:acceso abierto
Palavra-chave:model-driven engineering
conversational user interfaces
CUIs
access-control
RBAC
id ES_950494ef894fa5cfc9f0c854e50bda30
oai_identifier_str oai:openaccess.uoc.edu:10609/150268
network_acronym_str ES
network_name_str España
repository_id_str
spelling Modeling and enforcing access control policies in conversational user interfacesPlanas, ElenaMartínez, SalvadorBrambilla, MarcoCabot, Jordimodel-driven engineeringconversational user interfacesCUIsaccess-controlRBACConversational user interfaces (CUIs), such as chatbots, are becoming a common component of many software systems. Although they are evolving in many directions (such as advanced language processing features, thanks to new AI-based developments), less attention has been paid to access control and other security concerns associated with CUIs, which may pose a clear risk to the systems they interface with. In this paper, we apply model-driven techniques to model and enforce access-control policies in CUIs. In particular, we present a fully fledged framework to integrate the role-based access-control (RBAC) protocol into CUIs by: (1) modeling a set of access-control rules to specify permissions over the bot resources using a domain-specific language that tailors core RBAC concepts to the CUI domain; and (2) describing a mechanism to show the feasibility of automatically generating the infrastructure to evaluate and enforce the modeled access control policies at runtime.Springer202420242023info:eu-repo/semantics/articleinfo:eu-repo/semantics/publishedVersionapplication/pdfapplication/pdfhttp://hdl.handle.net/10609/150268https://doi.org/10.1007/s10270-023-01131-3reponame:O2, repositorio institucional de la UOCinstname:Universitat Oberta de Catalunya (UOC)InglésSoftware and Systems Modeling, 2023, 22(6)info:eu-repo/grantAgreement/AEI/2020/PID2020-114615RB-I00info:eu-repo/grantAgreement/AEI/2021/PDC2021-121404-I00CC BYhttp://creativecommons.org/licenses/by/3.0/es/info:eu-repo/semantics/openAccessoai:openaccess.uoc.edu:10609/1502682026-05-28T12:42:01Z
dc.title.none.fl_str_mv Modeling and enforcing access control policies in conversational user interfaces
title Modeling and enforcing access control policies in conversational user interfaces
spellingShingle Modeling and enforcing access control policies in conversational user interfaces
Planas, Elena
model-driven engineering
conversational user interfaces
CUIs
access-control
RBAC
title_short Modeling and enforcing access control policies in conversational user interfaces
title_full Modeling and enforcing access control policies in conversational user interfaces
title_fullStr Modeling and enforcing access control policies in conversational user interfaces
title_full_unstemmed Modeling and enforcing access control policies in conversational user interfaces
title_sort Modeling and enforcing access control policies in conversational user interfaces
dc.creator.none.fl_str_mv Planas, Elena
Martínez, Salvador
Brambilla, Marco
Cabot, Jordi
author Planas, Elena
author_facet Planas, Elena
Martínez, Salvador
Brambilla, Marco
Cabot, Jordi
author_role author
author2 Martínez, Salvador
Brambilla, Marco
Cabot, Jordi
author2_role author
author
author
dc.subject.none.fl_str_mv model-driven engineering
conversational user interfaces
CUIs
access-control
RBAC
topic model-driven engineering
conversational user interfaces
CUIs
access-control
RBAC
description Conversational user interfaces (CUIs), such as chatbots, are becoming a common component of many software systems. Although they are evolving in many directions (such as advanced language processing features, thanks to new AI-based developments), less attention has been paid to access control and other security concerns associated with CUIs, which may pose a clear risk to the systems they interface with. In this paper, we apply model-driven techniques to model and enforce access-control policies in CUIs. In particular, we present a fully fledged framework to integrate the role-based access-control (RBAC) protocol into CUIs by: (1) modeling a set of access-control rules to specify permissions over the bot resources using a domain-specific language that tailors core RBAC concepts to the CUI domain; and (2) describing a mechanism to show the feasibility of automatically generating the infrastructure to evaluate and enforce the modeled access control policies at runtime.
publishDate 2023
dc.date.none.fl_str_mv 2023
2024
2024
dc.type.none.fl_str_mv info:eu-repo/semantics/article
info:eu-repo/semantics/publishedVersion
format article
status_str publishedVersion
dc.identifier.none.fl_str_mv http://hdl.handle.net/10609/150268
https://doi.org/10.1007/s10270-023-01131-3
url http://hdl.handle.net/10609/150268
https://doi.org/10.1007/s10270-023-01131-3
dc.language.none.fl_str_mv Inglés
language_invalid_str_mv Inglés
dc.relation.none.fl_str_mv Software and Systems Modeling, 2023, 22(6)
info:eu-repo/grantAgreement/AEI/2020/PID2020-114615RB-I00
info:eu-repo/grantAgreement/AEI/2021/PDC2021-121404-I00
dc.rights.none.fl_str_mv CC BY
http://creativecommons.org/licenses/by/3.0/es/
info:eu-repo/semantics/openAccess
rights_invalid_str_mv CC BY
http://creativecommons.org/licenses/by/3.0/es/
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
application/pdf
dc.publisher.none.fl_str_mv Springer
publisher.none.fl_str_mv Springer
dc.source.none.fl_str_mv reponame:O2, repositorio institucional de la UOC
instname:Universitat Oberta de Catalunya (UOC)
instname_str Universitat Oberta de Catalunya (UOC)
reponame_str O2, repositorio institucional de la UOC
collection O2, repositorio institucional de la UOC
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1869413757042556928
score 15.301603

Registos relacionados