Can Causal (and Counterfactual) Reasoning improve Privacy Threat Modelling?

TL;DR

This paper explores how causal and counterfactual reasoning can enhance privacy threat modeling by enabling better anticipation and prevention of cybersecurity threats.

Contribution

It introduces the application of causal and counterfactual reasoning to improve privacy threat modeling methods.

Findings

Causal reasoning helps identify underlying threat causes.

Counterfactual thinking aids in threat prevention strategies.

Future PTM relies on causal and counterfactual approaches.

Abstract

Causal questions often permeate in our day-to-day activities. With causal reasoning and counterfactual intuition, privacy threats can not only be alleviated but also prevented. In this paper, we discuss what is causal and counterfactual reasoning and how this can be applied in the field of privacy threat modelling (PTM). We believe that the future of PTM relies on how we can causally and counterfactually imagine cybersecurity threats and incidents.