The mystery of security design.

Designing for security is hard without security getting in the way of design. Unfortunately, security is often promoted through fear, uncertainty, and doubt (FUD). As a result, the scale of FUD has now become so great that it hinders people's ability to appreciate messages that security researchers try to impart. We have created a short documentary film called "Designing security through personas". This film distils the essence of four security design papers, but does so without promoting security through fear. Instead, the film presents the practical, everyday challenges associated with designing for security, and does so by screening nothing artificial. For example, Figure 1 is taken from a scene where affinity diagramming is used to analyse data used to create personas; the summative results of this analysis are presented elsewhere. To convey the challenge of designing for security, the film's visual and audio design uses mystery as a metaphor for security, and design as synonymous with solving this mystery; this is illustrated in Figure 2, which is taken from a scene where the 'designer' imagines three personas as elements of an emergent solution. To further reinforce the idea of security design as the unraveling of a mystery, the film shows the designer observing and collecting data about forensic investigators, who are themselves collecting data for subsequent investigation