Our implications call for:
• Tailored, culturally-aware digital safety tools
• Community-based learning resources
• Designs that respect collective values, modesty, and multiple social roles
• Recognizing intergenerational tech collaborations
Key findings:
• First-gen immigrants face risks tied to religion, race, and immigration status, such as surveillance, reputational harm, and discrimination.
• Second-gen immigrants largely mirror broader U.S. attitudes, focusing on scams and data breaches.
We interviewed 25 immigrants, both parents (1st-gen) and their children (2nd-gen) to understand how identity, context, and family dynamics shape digital safety practices.
The other one is in collaboration with some wonderful researchers at UTK and Purdue.
Security and Privacy Experiences of First- and Second-Generation Pakistani Immigrants to the US: Perceptions, Practices, Challenges, and Parent-Child Dynamics
www.computer.org/csdl/proceed...
One key takeaway: Unlike systems, people live in complex contexts. Effective threat modeling must engage those contexts and include participant-driven insights and goals, and not just researcher-defined harms.
We analyzed 78 papers from top venues (SOUPS, CHI, S&P, etc.) that study how people perceive and respond to security/privacy threats. We developed:
- A structured framework
- A guide for researchers
- A comparison to systems threat modeling
One of them systematizes the emerging practice of human-centered threat modeling, a method researchers use to identify threats to people.
SoK: A Framework and Guide for Human-Centered Threat Modeling in Security and Privacy Research
www.computer.org/csdl/proceed...
Thrilled to be presenting two papers at #IEEESP2025 this year!
I will be presenting them both on Tuesday in Track 1 (Session 3 and Session 4)
