Accountability in Computing: Concepts and Mechanisms

Modern day security technologies, such as passwords, authentication protocols, firewalls, and access-control Mechanisms, are preventive in nature. That is, they stop unauthorized parties before they are able to access data, information and services or violate system policies. However, the dramatically increased scale and complexity of Internet commerce, social networking, remote work, distance learning, and myriad other forms of social, economic, and intellectual engagement online with both strangers and friends has increased the awareness that these preventive mechanisms are inadequate in certain circumstances. The result is a growing interest in accountability mechanisms to complement preventive measures. In this survey of the concept of accountability in information systems, the authors focus on systems in which policy violations are punished; that is, the actors are held accountable for their actions. As there is no accepted definition of the precise meaning of accountability in terms of such systems, the authors provide the reader with a broad overview of the concept. In doing so, they introduce the topic and place it in context of the social and systematic factors which help to define the term. They proceed to discuss in depth the mechanisms and domains across numerous disciplines before describing the available tools and proofs for implementing accountability in systems. Finally, they summarize the ideas, key published papers and ideas for future work. This monograph provides the reader with a thorough overview of the concept of accountability in modern day computing systems. In enables the reader to quickly understand the concept and the progress that has been to date in implementing the tools for the next generation of online security systems.