Malicious User Experience Design Research for Cybersecurity

TL;DR

This paper investigates how principles from game design and user experience research can inform the creation of cybersecurity tools that understand and leverage malicious users' motivations, proposing a novel malicious user experience design approach.

Contribution

It introduces a new malicious user experience design framework based on game user research and the GameFlow model, enhancing cybersecurity strategies against malicious actors.

Findings

Identifies key factors influencing malicious user engagement.

Proposes a game-inspired design approach for cybersecurity tools.

Suggests that understanding malicious user psychology can improve defense mechanisms.

Abstract

This paper explores the factors and theory behind the user-centered research that is necessary to create a successful game-like prototype, and user experience, for malicious users in a cybersecurity context. We explore what is known about successful addictive design in the fields of video games and gambling to understand the allure of breaking into a system, and the joy of thwarting the security to reach a goal or a reward of data. Based on the malicious user research, game user research, and using the GameFlow framework, we propose a novel malicious user experience design approach