Tristan Cole
November 1, 2024
Inclusive Cybersecurity Visualization
The research article “Critical Visualization: A Case for Rethinking How We Visualize Risk and Security” by Peter Hall, Claude Heath, and Lizzie Coles-Kemp offers a profound exploration of the intersection between cybersecurity and social sciences. This study delves into the narratives and methodologies that underpin current visualization practices in cybersecurity, advocating for a broader, more inclusive approach that incorporates social and community-based security aspects.
Firstly, the topic of this article is deeply rooted in the principles of social sciences, particularly in how societal narratives shape technological practices. The authors argue that the prime mode of visualization in cybersecurity is heavily influenced by statistical and probabilistic approaches, which often overlook the socio-technical dimensions of security. This perspective aligns with social science principles that emphasize the importance of understanding human behavior, societal norms, and cultural contexts in shaping technological outcomes.
The study’s primary research question revolves around how current visualization techniques in cybersecurity can be reformulated to address the socio-technical aspects of security. The authors hypothesize that existing visualizations are too focused on adversarial security issues, thereby neglecting broader social and community-based security concerns. This hypothesis is grounded in the belief that a more comprehensive approach to visualization can lead to more effective and inclusive security practices.
To investigate this hypothesis, the authors employ a variety of research methods, including case studies of participatory modeling and crowdsourcing projects. These methods are chosen to illustrate the potential for alternative visualization practices that foster resilience through social and spatial practices. The case studies provide concrete examples of how visualization can be used to engage communities in security practices, thereby broadening the scope of what is considered relevant in cybersecurity.
The types of data and analysis used in this study are both qualitative and quantitative. The authors analyze existing visualization tools and their underlying narratives, drawing on evidence from the EU-funded TREsPASS project. This project explores the limits and possibilities of visualization to support tools focused on predicting socio-technical security risks. The analysis is both critical and reflective, aiming to uncover the implicit assumptions and biases that shape current visualization practices.
Concepts discussed in class, such as the socio-technical systems theory and the role of narratives in shaping technological practices, are highly relevant to this article. The authors’ critique of current visualization practices echoes the socio-technical systems theory, which posits that technology and society are deeply intertwined and must be studied together. Additionally, the emphasis on narratives aligns with discussions on how societal stories and cultural contexts influence technological development and implementation.
The topic of this article also relates to the challenges, concerns, and contributions of marginalized groups. By advocating for a broader approach to visualization that includes social and community-based security, the authors highlight the importance of considering diverse perspectives in cybersecurity. This approach can help address the concerns of marginalized groups who are often disproportionately affected by security breaches and cyber threats. By involving these groups in the visualization and security processes, the study contributes to more equitable and inclusive security practices.
Overall, the contributions of this study to society are significant. By challenging the dominant narratives and methodologies in cybersecurity visualization, the authors open new possibilities for more inclusive and effective security practices. Their work encourages a shift from a purely adversarial focus to one that includes social and community-based security, thereby fostering resilience and inclusivity in cybersecurity practices. This broader approach not only enhances the effectiveness of security measures but also ensures that the voices and concerns of marginalized groups are heard and addressed.
Works Cited
Hall, P., Heath, C., & Coles-Kemp, L. (2015, December 01). Critical Visualization: a case for rethinking how we visualize risk and security. Journal of Cybersecurity, I(1), 93-108. Retrieved September 28, 2024, from https://academic.oup.com/cybersecurity/article/1/1/93/2366512?searchresult=1#37864594