{"id":"https://openalex.org/W7160914159","doi":"https://doi.org/10.48550/arxiv.2605.10012","title":"Sketch-based Access Control: A Multimodal Interface for Translating User Preferences into Intent-Aligned Policies","display_name":"Sketch-based Access Control: A Multimodal Interface for Translating User Preferences into Intent-Aligned Policies","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W7160914159","doi":"https://doi.org/10.48550/arxiv.2605.10012"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.10012","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10012","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.10012","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065406807","display_name":"Kyzyl Monteiro","orcid":"https://orcid.org/0000-0002-2723-9500"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Monteiro, Kyzyl","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135969199","display_name":"Sauvik Das","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Das, Sauvik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.40939998626708984,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.40939998626708984,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12607","display_name":"Personal Information Management and User Behavior","score":0.06840000301599503,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.04320000112056732,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.7651000022888184},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6801000237464905},{"id":"https://openalex.org/keywords/usable","display_name":"USable","score":0.6281999945640564},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5203999876976013},{"id":"https://openalex.org/keywords/user-interface","display_name":"User interface","score":0.5182999968528748},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.48510000109672546},{"id":"https://openalex.org/keywords/formative-assessment","display_name":"Formative assessment","score":0.4165000021457672},{"id":"https://openalex.org/keywords/interpretation","display_name":"Interpretation (philosophy)","score":0.38929998874664307}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7652000188827515},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.7651000022888184},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6801000237464905},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.6281999945640564},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.5573999881744385},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5203999876976013},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.5182999968528748},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.48510000109672546},{"id":"https://openalex.org/C42525527","wikidata":"https://www.wikidata.org/wiki/Q1209955","display_name":"Formative assessment","level":2,"score":0.4165000021457672},{"id":"https://openalex.org/C527412718","wikidata":"https://www.wikidata.org/wiki/Q855395","display_name":"Interpretation (philosophy)","level":2,"score":0.38929998874664307},{"id":"https://openalex.org/C48814466","wikidata":"https://www.wikidata.org/wiki/Q1228590","display_name":"Discretionary access control","level":4,"score":0.3675000071525574},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3571999967098236},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.33709999918937683},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.3140000104904175},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.31279999017715454},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C132829578","wikidata":"https://www.wikidata.org/wiki/Q581151","display_name":"Situated","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2833999991416931},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.27239999175071716},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.27059999108314514},{"id":"https://openalex.org/C161772715","wikidata":"https://www.wikidata.org/wiki/Q1136996","display_name":"User-centered design","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.2574999928474426},{"id":"https://openalex.org/C2982933515","wikidata":"https://www.wikidata.org/wiki/Q104381823","display_name":"Public access","level":2,"score":0.25290000438690186},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.10012","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10012","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.10012","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10012","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17","score":0.5122624635696411}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Developing":[0],"simple":[1],"and":[2,19,65,87,100,110,134,147,161],"expressive":[3,47],"access":[4,16,40,113,127],"controls":[5],"--":[6,23,97,102,150],"interfaces":[7],"to":[8,17,61,108],"specify":[9],"policies":[10,149],"that":[11,44],"define":[12],"who":[13],"should":[14],"have":[15],"resources":[18],"under":[20],"what":[21],"circumstances":[22],"is":[24],"a":[25,37,76,89,117],"longstanding":[26],"challenge":[27],"in":[28,124],"usable":[29],"security.":[30],"We":[31],"present":[32],"Sketch-based":[33],"Access":[34],"Control":[35],"(SBAC),":[36],"sketch-based,":[38],"AI-assisted":[39],"control":[41,114,128],"authoring":[42],"system":[43,133],"combines":[45],"the":[46,52,63,105,132,135],"power":[48],"of":[49,55,67,94],"sketching":[50],"with":[51,79,120],"interpretive":[53],"capabilities":[54],"multimodal":[56],"large":[57],"language":[58],"models":[59],"(MLLMs)":[60],"support":[62],"interpretation":[64],"validation":[66],"policy":[68,163],"specifications":[69],"as":[70],"they":[71,153],"are":[72],"iteratively":[73],"refined.":[74],"Through":[75],"formative":[77],"study":[78],"14":[80,121],"participants,":[81],"we":[82,130],"identified":[83],"three":[84,95],"design":[85],"requirements":[86],"developed":[88],"human-AI":[90],"collaborative":[91],"workflow":[92,136],"composed":[93],"stages":[96],"Specify,":[98],"Analyze,":[99],"Test":[101],"enabled":[103],"by":[104],"system's":[106],"ability":[107],"maintain":[109],"interpret":[111],"evolving":[112],"specifications.":[115],"In":[116],"user":[118],"evaluation":[119],"participants":[122,138],"grounded":[123],"their":[125],"real-world":[126],"scenarios,":[129],"found":[131],"helped":[137],"progressively":[139],"refine":[140],"initially":[141],"underspecified":[142],"preferences":[143],"into":[144],"more":[145],"complete":[146],"precise":[148],"surfacing":[151],"gaps":[152],"had":[154],"not":[155],"anticipated,":[156],"resolving":[157],"ambiguities":[158],"through":[159,165],"dialogue,":[160],"validating":[162],"behavior":[164],"concrete":[166],"scenarios.":[167]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-13T00:00:00"}