Examining the Contribution of Critical Visualisation to Information Security

Abstract

This paper examines the use of visualisations in the field of information security and in particular focuses on the practice of information security risk assessment. We examine the current roles of information security visualisations and place these roles in the wider information visualisation discourse. We present an analytic lens which divides visualisations into three categories: journalistic, scientific and critical visualisations. We then present a case study that uses these three categories of visualisations to further support information security practice.Two significant results emerge from this case study: (1) visualisations that promote critical thinking and reflection (a form of critical visualisation) support the multi-stakeholder nature of risk assessment and (2) a preparatory stage in risk assessment is sometimes needed by service designers in order to establish the service design before conducting a formal risk assessment.The reader is invited to explore the images in the digital version of this paper where they can zoom in to particular aspects of the images and view the images in colour. CCS Concepts•Human-centered computing → Visualization theory, concepts and paradigms; Participatory design; Computer supported cooperative work; Graphical user interfaces; •Security and privacy → Social aspects of security and privacy;

Keeping Children Safe Online: Understanding the Concerns of Carers of Children with Autism

“…While our focus was on ASD, we felt that our results could be more broadly applicable. Our use of RPs to augment a traditional focus group discussion was motivated by similar approaches for novel user engagements to better understand their security and privacy needs [11,14].…”

Out of Sight, but Not Out of Mind: A Diagrammatic Conversation on Relational Drawing

“…There is a profound requirement to handle complexity and qualitative space in the social sciences and digital humanities. The 'field inscription' approach described in the previous section has shown that it can be adapted to the analysis and representation of participatory research data (Figure 6) [23], and has the potential to support critical approaches [24]. It can also help develop visual analysis tools in ethnomethodology [25].…”

The Attack Navigator

“…We have published key innovations in for example the attack navigation metaphor [14], making attacker profiles explicit [28], attack generation [20,21], quantitative analysis [29,30], and visualisation of maps and paths [31,32]. Our practical and theoretical developments open up for many new and interesting research questions in the area of attack navigation and graphical models for security, for example:…”