On using the Task Models for Validation and Evolution of Usable Security Design Patterns

Abstract

Security and usability are two interrelated characteristics. Management of the instances where security and usability are in conflict is often a tough task, which is reliant on the skills of the developers and designers. The paper attempts to support the developers and designers in the management of the conflicts by proposing a task model-based approach that enables them to make informed choices concerning the management of the conflicts in the products they develop, thereby enabling them (1) to validate the efficacy of the design patterns before applying them, and (2) to identify limitations in the existing design patterns and propose its evolution. The paper also presents the findings from a case study where an existing usable security pattern was subjected to the proposed task model-based approach.