Accepted author manuscript, 679 KB, PDF document
Available under license: CC BY: Creative Commons Attribution 4.0 International License
Final published version
Research output: Contribution in Book/Report/Proceedings - With ISBN/ISSN › Conference contribution/Paper › peer-review
Research output: Contribution in Book/Report/Proceedings - With ISBN/ISSN › Conference contribution/Paper › peer-review
}
TY - GEN
T1 - Vision: Design Fiction for Cybersecurity
T2 - Using Science Fiction to Help Software Developers Anticipate Problems
AU - Loureiro-Koechlin, Cecilia
AU - Córdoba-Pachón, José-Rodrigo
AU - Coventry, Lynne
AU - Demetriou, Soteris
AU - Weir, Charles
PY - 2022/9/29
Y1 - 2022/9/29
N2 - Security and privacy issues are an ever-increasing problem for software systems. To address them, software developers must anticipate the problems that their developed systems may face, using a process we call ‘threat assessment’. Unfortunately, given the shortage of security experts, and the need to ‘think laterally’, threat assessment is very difficult for many development teams. One possibility is to use stories, known as ‘Design Fiction,’ to help developers visualize different contexts and future use for their software. But such stories are themselves difficult to write. A recent pilot project investigated using a broad-brush threat model and fiction samples derived from existing science fiction literature to help developers create threat assessments for Health Internet-of-Things devices. The preliminary results are encouraging, and open the possibility of developing a method to support developers in threat assessment in any domain.
AB - Security and privacy issues are an ever-increasing problem for software systems. To address them, software developers must anticipate the problems that their developed systems may face, using a process we call ‘threat assessment’. Unfortunately, given the shortage of security experts, and the need to ‘think laterally’, threat assessment is very difficult for many development teams. One possibility is to use stories, known as ‘Design Fiction,’ to help developers visualize different contexts and future use for their software. But such stories are themselves difficult to write. A recent pilot project investigated using a broad-brush threat model and fiction samples derived from existing science fiction literature to help developers create threat assessments for Health Internet-of-Things devices. The preliminary results are encouraging, and open the possibility of developing a method to support developers in threat assessment in any domain.
U2 - 10.1145/3549015.3554295
DO - 10.1145/3549015.3554295
M3 - Conference contribution/Paper
T3 - ACM International Conference Proceeding Series
SP - 79
EP - 84
BT - EuroUSEC '22
PB - ACM
CY - New York
ER -