Security Through Design - Making Security Better by Designing for People

Explore the intersection of security and user-centered design in this Black Hat conference talk. Delve into why certain technologies frustrate users while others delight, and examine how security processes and solutions are typically created. Challenge the notion that "humans are the weakest link" by learning user-centered design methods and concepts from disciplines like economics, psychology, and marketing. Discover how to build truly usable security tools, team structures, communication strategies, and incentive alignments. Gain practical tips for improving corporate productivity and security through design thinking, empathy, and understanding human behavior. Learn about desire trails, checklists, phishing prevention, AB testing, the power of defaults, and ecosystem considerations in security design.