Author_Institution :
Univ. of Southern California, Los Angeles, CA, USA
Abstract :
Computer risk exposures and security in general are reviewed, and factors suggesting that expert system security is a unique problem are examined. Security requirements associated with the unique characteristics of expert systems are investigated. They include technical aspects of knowledge (certainty factors, symbolic information and special fixes), structure (user interface, knowledge base, inference engine and database), design methodology (prototyping) and the current delivery environment (e.g., PCs and expert system shells). The security of working expert systems as discussed in the literature is examined. Rationales for the current apparent lack of expert system security are analyzed and the impact of possible security controls on expert system users and developers is assessed.<>
Keywords :
expert systems; security of data; PCs; certainty factors; computer risk exposures; current delivery environment; database; design methodology; expert system security; expert system shells; expert system users; inference engine; knowledge base; prototyping; security controls; special fixes; symbolic information; technical aspects; unique characteristics; user interface; working expert systems; Computer security; Data security; Databases; Design methodology; Engines; Expert systems; Information security; Personal communication networks; Prototypes; User interfaces;