TECHNOLOGY TO ESTABLISH AND SUPPORT THE ROLE OF MAN IN COMPUTER SECURITY SYSTEMS

THE OBJECTIVE OF THE PROPOSED EFFORT IS TO PROVIDE COMPUTER SECURITY SYSTEM DESIGNERS WITH METHODS AND DATA FOR DETERMINING THE APPROPRIATE ROLES OF HUMANS IN COMPUTER SECURITY FUNCTIONS AND ESTABLISHING DESIGN REQUIREMENTS AND CRITERIA FOR DESIGN OF USER-COMPUTER INTERFACES AND DECISION AIDS TO SUPPORTTHE ASSIGNED ROLE OF MAN. THE EFFORT WILL ALSO PROVIDE RESEARCH TO DEFINE GUIDELINES FOR DETERMINING WHEN HUMAN PERFORMANCE DEGRADATIONS ARE EXPECTED TO EXCEED TOLERANCES FOR EFFECTIVE SYSTEM OPERATION. PHASE I OBJECTIVES ARE TO: 1 ) IDENTIFY REQUIREMENTS AND PROBLEMS FOR HUMAN INVOLVEMENT IN COMPUTER SECURITY OPERATIONS; 2) DEVELOP DESIGN REQUIREMENTS AND FUNCTIONAL SPECIFICATIONS FOR AN AUTOMATED TOOL TO ASSIST IN THE DETERMINATION OF THE ROLE OF THE HUMAN IN COMPUTER SECURITY ACTIVITIES; 3) DEVELOP DESIGN REQUIREMENTS AND FUNCTIONAL SPECIFICATIONS FOR DECISION AIDS AND USER-COMPUTER INTERFACES TO SUPPORT HUMAN-ASSIGNED SECURITY TASKS: 4) IDENTIFY RESEARCH REQUIREMENTS FOR SPECIFYING HUMAN PERFORMANCE LIMITS; AND 5) DEVELOP REQUIREMENTS AND CONSTRAINTS IN A TRUSTED COMPUTER SYSTEM EVALUATION CRITERIA WHICH ADDRESS HUMAN PERFORMANCE AND MAN-MACHINE INTERFACE DESIGN ISSUES FOR MAINTAINING COMPUTER SECURITY.