Vision: Design Fiction for Cybersecurity Using Science Fiction to Help Software Developers Anticipate Problems

Cecilia Loureiro-Koechlin, Jose Rodrigo Cordoba-Pachon, Lynne Coventry, Soteris Demetriou, Charles Weir

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Security and privacy issues are an ever-increasing problem for software systems. To address them, software developers must anticipate the problems that their developed systems may face, using a process we call 'threat assessment'. Unfortunately, given the shortage of security experts, and the need to 'think laterally', threat assessment is very difficult for many development teams. One possibility is to use stories, known as 'Design Fiction,' to help developers visualize different contexts and future use for their software. But such stories are themselves difficult to write. A recent pilot project investigated using a broad-brush threat model and fiction samples derived from existing science fiction literature to help developers create threat assessments for Health Internet-of-Things devices. The preliminary results are encouraging, and open the possibility of developing a method to support developers in threat assessment in any domain.

Original languageEnglish
Title of host publicationEuroUSEC '22
Subtitle of host publicationProceedings of the 2022 European Symposium on Usable Security
Place of PublicationNew York, US
PublisherACM
Pages79-84
Number of pages6
ISBN (Electronic)9781450397001
ISBN (Print)9781450384230
DOIs
Publication statusPublished - Sep 2022
Event2nd European Symposium on Usable Security, EuroUSEC 2022 - Karlsruhe, Germany
Duration: 29 Sep 202230 Sep 2022

Publication series

NameACM International Conference Proceeding Series

Conference

Conference2nd European Symposium on Usable Security, EuroUSEC 2022
Country/TerritoryGermany
CityKarlsruhe
Period29/09/2230/09/22

Fingerprint

Dive into the research topics of 'Vision: Design Fiction for Cybersecurity Using Science Fiction to Help Software Developers Anticipate Problems'. Together they form a unique fingerprint.

Cite this