Dartmouth College Computer Science
Technical Report series
TR search TR listserv
|By author:||A B C D E F G H I J K L M N O P Q R S T U V W X Y Z|
|By number:||2017, 2016, 2015, 2014, 2013, 2012, 2011, 2010, 2009, 2008, 2007, 2006, 2005, 2004, 2003, 2002, 2001, 2000, 1999, 1998, 1997, 1996, 1995, 1994, 1993, 1992, 1991, 1990, 1989, 1988, 1987, 1986|
In theory, access control is a solved problem. In practice,
large real-world enterprises still report trouble:
de facto policy becomes unmanageable; users circumvent
controls. These issues can be particularly critical
in medical IT, such as emerging EMR and EHR,
where access control errors can have serious repercussions.
In this paper, we investigate how real-world
EMR users think about access control when they are
making policy decisions in the abstract---and when
they are actually using the system in treatment scenarios.
Mismatches suggest places (“empathy gaps”)
where new policy tools may be needed
A preliminary report about the first author's B.A. thesis.
Bibliographic citation for this report: [plain text] [BIB] [BibTeX] [Refer]
Or copy and paste:
Yifei Wang, Sean W. Smith, and Andrew Gettinger, "Access Control Hygiene and the Empathy Gap in Medical IT." Dartmouth Computer Science Technical Report TR2012-713, April 2012.
Notify me about new tech reports.
Search the technical reports.
To receive paper copy of a report, by mail, send your address and the TR number to reports AT cs.dartmouth.edu
Copyright notice: The documents contained in this server are included by the contributing authors as a means to ensure timely dissemination of scholarly and technical work on a non-commercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, notwithstanding that they have offered their works here electronically. It is understood that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.
Technical reports collection maintained by David Kotz.