Security

We investigate cybersecurity toolkits, collections of public facing materials intended to help users achieve security online. We look at design dimensions of these toolkits, and investigate how the toolkits construct security as a value and how they construct people as (in)secure users.

The creators of technical infrastructure are under social and legal pressure to comply with expectations that can be difficult to translate into computational and business logics. This dissertation bridges this gap through three projects that focus on privacy engineering, information security, and data economics, respectively. These projects culminate in a new formal method for evaluating the strategic and tactical value of data: data games. This method relies on a core theoretical contribution building on the work of Shannon, Dretske, Pearl, Koller, and Nissenbaum: a definition of situated information flow as causal flow in the context of other causal relations and strategic choices.