Alice Hutchings

Identifying Unintended Harms of Cybersecurity Countermeasures

2019

Well-meaning cybersecurity risk owners will deploy countermeasures (technologies or procedures) to manage risks to their services or systems. In some cases, those countermeasures will produce unintended consequences, which must then be addressed. Unintended consequences can …

Threat Me Right: A Human HARMS Threat Model for Technical Systems

2025 · arXiv (Cornell University)

Threat modelling is the process of identifying potential vulnerabilities in a system and prioritising them. Existing threat modelling tools focus primarily on technical systems and are not as well suited to interpersonal threats. In this …