Security and Privacy Product Inclusion

TL;DR

This paper addresses the challenges of ensuring security and privacy for diverse user groups by proposing a threat modeling framework and presenting survey results to guide inclusive product design.

Contribution

It introduces a threat modeling approach tailored for diverse demographics and offers a global survey analysis to inform inclusive security and privacy practices.

Findings

Identified key risks affecting low-income and shared device users

Survey results highlight gaps in current security and privacy measures

Framework aids developers in designing more inclusive security solutions

Abstract

In this paper, we explore the challenges of ensuring security and privacy for users from diverse demographic backgrounds. We propose a threat modeling approach to identify potential risks and countermeasures for product inclusion in security and privacy. We discuss various factors that can affect a user's ability to achieve a high level of security and privacy, including low-income demographics, poor connectivity, shared device usage, ML fairness, etc. We present results from a global security and privacy user experience survey and discuss the implications for product developers. Our work highlights the need for a more inclusive approach to security and privacy and provides a framework for researchers and practitioners to consider when designing products and services for a diverse range of users.