Participatory Threat Modelling
Participatory Threat Modelling
复制标题
参与式威胁建模
DOI：
10.1145/3411763.3451731
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Slupska J
中科院分区：
文献类型：
--
作者：
Slupska J
我们提出“参与性威胁建模”作为一种女权主义的网络安全实践，它允许技术研究集中传统上被边缘化和被排斥的经验。我们促成了一系列社区研讨会，邀请参与者定义自己的网络安全威胁，实施变革以保护自己，并反思网络安全在他们生活中的作用。在这样做的时候，我们比赛两个层次的方法，以用户在网络安全，寻求“解决”人类行为的问题，并在人机交互的趋势等同于行动研究与新技术解决方案的发展。我们的研究结果强调了参与网络安全的障碍，个人经历（例如性别，种族或性取向）在塑造这种参与中的作用，以及社区网络安全方法的好处。
We present “participatory threat modelling” as a feminist cybersecurity practice which allows technology research to centre traditionally marginalized and excluded experiences. We facilitated a series of community workshops in which we invited participants to define their own cybersecurity threats, implement changes to defend themselves, and reflect on the role cybersecurity plays in their lives. In doing so, we contest both hierarchical approaches to users in cybersecurity—which seek to ‘solve’ the problems of human behavior—and a tendency in HCI to equate action research with the development of novel technology solutions. Our findings draw highlight barriers to engaging with cybersecurity, the role of personal experiences (for instance of gender, race or sexuality) in shaping this engagement, and the benefits of communal approaches to cybersecurity.