Adapting Personas and Scenarios for Security and Usability Design

Abstract

In this chapter, I describe how personas and scenarios can be adapted to best suit the design of secure and usable systems. I begin by presenting an approach for building personas as part of an IRIS process. Such processes typically rely on empirical data collected for the purpose of creating and using personas, but such data is not always easy to obtain. To work around this restriction, I describe how argumentation models can be used to provide assurance for personas based on assumptions or other data sources. I then examine how this model can be used to link grounded theory models to personas, providing a means of effectively validating personas. Building on the use of argumentation models, I explore how these can be used to better adapt scenarios for usability and security using misusability cases: scenarios which describe how design decisions may lead to usability problems subsequently leading to system misuse.