Seeing the Future

Abstract

We have argued at length that it is vital to understand both the typical user and the malicious user when designing security and privacy systems. We have illustrated this with a series of case studies. We have considered approaches to determine what malicious users do, and why; and we have shown how developing problems, such as launchpad attacks, can be addressed. These examples are all anchored in observing and understanding both the typical user and the malicious user.