UsersFirst: A User-Centric Threat Modeling Framework for Privacy Notice and Choice
summary
UsersFirst is a threat-modeling framework that breaks notice-and-choice failures into four actionable categories—discovery and use, comprehension problems, inadequate choices, and manipulative patterns—and provides design and analysis workflows. It ships a threat taxonomy, mitigation suggestions (e.g., centralized dashboards, simpler labels, equal accept/reject paths), and taxonomy tables with real examples like knee‑height CCPA signs and oversized cookie toggles. Lab tests with privacy engineering students and a study with 26 privacy professionals show the taxonomy finds more threats than LINDDUN. The framework has analysis and design phases and live case studies.
AI-written summary · about
chapters (11)
- 0:00UsersFirst framework intro
- 1:52Regulatory shifts in notice/choice
- 3:15Purpose of user-centric threat modeling
- 5:39Defining user-oriented threats
- 6:20Four user threat categories
- 7:22UsersFirst design phase
- 8:05Analysis of existing systems
- 9:31Taxonomy examples
- 12:46Threat mitigations
- 13:30Framework effectiveness
- 15:16Summary and future
related talks
40mPersonal Threat Models and, Speculatively, Privacy Governance
44mA Taste of Privacy Threat Modeling
22mPrivacy Threat Modeling
01h 13mBuilding Privacy Foundations Today for Tomorrow’s Tech.
20mPrivacy Shift Left: A Machine-Assisted Threat Modeling Approach
35mEmpowering Users: A Framework For Informed Consent
16mPutting Privacy on the Map
11mThe Future of Privacy