SlideShare a Scribd company logo
Friction as a Function
in Cyber-Security
Meirav Har-Paz
UX Lead & Research, CyberArk
“DON’T MAKE ME THINK”
Steve Krug
DON’T MAKE ME THINK
DON’T MAKE ME THINK
When it comes to complex cybersecurity systems -
the fast, easy and standard way of doing tasks
is not always the best way for our users
Meirav Har-Paz
UX Lead & Research, CyberArk
Friction
In mechanics, friction is a force that resists the relative motion
of one solid object over another
Friction
In UX, there is friction
between the user and
the interface
Friction
When there is little friction, everything goes smoothly.
Maybe too smoothly.
DON’T MAKE ME THINK
DON’T MAKE ME THINK
When it comes to complex cybersecurity systems -
the fast, easy and standard way of doing tasks
is not always the best way for our users
CyberArk is an information security company
offering Privileged Account Security
Meet Our Users
Paul, Basic User Adam, Admin Jane, Manager
3 principles
DON’T MAKE ME THINK
DON’T MAKE ME THINK
Decrease Visual Load
DON’T MAKE ME THINK
MAKE ME COMPREHEND
When it comes to rarely used critical operations,
we’ll incorporate inline help text - even at a cost of
increasing the visual load
MAKE ME COMPREHEND
Adam, Admin
MAKE ME COMPREHEND
Adam, Admin
DON’T MAKE ME THINK
Don’t Waste My Time
DON’T MAKE ME THINK
MAKE ME RE-CONFIRM
When it comes to the most critical operations that are
significantly affect objects, users, and environments,
we’ll design numerous confirmation steps
MAKE ME RE-CONFIRM
Adam, Admin
MAKE ME RE-CONFIRM
Adam, Admin
MAKE ME RE-CONFIRM
Jane, Manager
MAKE ME RE-CONFIRM
Jane, Manager
MAKE ME RE-CONFIRM
Jane, Manager
MAKE ME RE-CONFIRM
Jane, Manager
MAKE ME RE-CONFIRM
Jane, Manager
DON’T MAKE ME THINK
Keep It Consistent
DON’T MAKE ME THINK
MAKE ME PURSUE
When doing the same function to multiple entities – break
consistency to slow users down and make them aware of
the consequence of their actions
MAKE ME PURSUE
MAKE ME PURSUE
Paul, Basic User
MAKE ME PURSUE
Adam, Admin
MAKE ME PURSUE
Adam, Admin
MAKE ME PURSUE
Adam, Admin
MAKE ME PURSUE
Adam, Admin
MAKE ME PURSUE
Adam, Admin
DON’T MAKE ME THINK
MAKE ME PURSUE
MAKE ME COMPREHEND
MAKE ME CONFIRM
DON’T MAKE ME THINK
Increase UX friction
to empower users’ sense of
safety and control.
Carefully consider when, for
whom, and how to increase
the friction.
Always test and validate.
Increase friction
to prevent glitches.
Thanks!
Meirav Har-Paz
Marvily.inspire
marvily.inspire@gmail.com

More Related Content

Similar to Friction as a Function in Cyber-Security - Meirav Har-Paz

Appzlicious Smart Apps Presentation
Appzlicious Smart Apps PresentationAppzlicious Smart Apps Presentation
Appzlicious Smart Apps Presentation
orapopo
 
Keeping it Snappy: Improving Website Performance
Keeping it Snappy: Improving Website PerformanceKeeping it Snappy: Improving Website Performance
Keeping it Snappy: Improving Website Performance
M. Jackson Wilkinson
 
0 for 3: Edtech Startup Lessons Learned
0 for 3: Edtech Startup Lessons Learned0 for 3: Edtech Startup Lessons Learned
0 for 3: Edtech Startup Lessons Learned
SeriousGamesAssoc
 
Scrum under a waterfall
Scrum under a waterfallScrum under a waterfall
Scrum under a waterfall
Ming Man Chan
 
Android Advanced Techniques
Android Advanced TechniquesAndroid Advanced Techniques
Android Advanced Techniques
Andrei Catinean
 
Our continuous delivery journey
Our continuous delivery journeyOur continuous delivery journey
Our continuous delivery journey
Suzie Prince
 
Velocity_Conference
Velocity_ConferenceVelocity_Conference
Velocity_Conference
Anne Cypcar
 
Self-Service Operations: Because Failure Still Happens (Developer Edition)
Self-Service Operations: Because Failure Still Happens (Developer Edition)Self-Service Operations: Because Failure Still Happens (Developer Edition)
Self-Service Operations: Because Failure Still Happens (Developer Edition)
Rundeck
 
Design at TransferWise
Design at TransferWiseDesign at TransferWise
Design at TransferWise
Nilan Peiris
 
Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...
Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...
Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...
Product Camp Brasil
 
Security Teams & Tech In A Cloud World
Security Teams & Tech In A Cloud WorldSecurity Teams & Tech In A Cloud World
Security Teams & Tech In A Cloud World
Mark Nunnikhoven
 
Operations as a Service: Because Failure Still Happens
Operations as a Service: Because Failure Still Happens Operations as a Service: Because Failure Still Happens
Operations as a Service: Because Failure Still Happens
Rundeck
 
Agile Resiliency: How CMMI can make Agile thrive and survive
Agile Resiliency: How CMMI can make Agile thrive and surviveAgile Resiliency: How CMMI can make Agile thrive and survive
Agile Resiliency: How CMMI can make Agile thrive and survive
Jeff Dalton
 
What our Partners and Customers are saying about Webroot SecureAnywhere Busin...
What our Partners and Customers are saying about Webroot SecureAnywhere Busin...What our Partners and Customers are saying about Webroot SecureAnywhere Busin...
What our Partners and Customers are saying about Webroot SecureAnywhere Busin...
Webroot
 
Cloud, DevOps and the New Security Practitioner
Cloud, DevOps and the New Security PractitionerCloud, DevOps and the New Security Practitioner
Cloud, DevOps and the New Security Practitioner
Adrian Sanabria
 
Erase and Rewind - Open Web Camp 2015
Erase and Rewind - Open Web Camp 2015Erase and Rewind - Open Web Camp 2015
Erase and Rewind - Open Web Camp 2015
Christian Heilmann
 
Abusing the Cloud for Fun and Profit
Abusing the Cloud for Fun and ProfitAbusing the Cloud for Fun and Profit
Abusing the Cloud for Fun and Profit
Alan Pinstein
 
Infrastructure as Code to Maintain your Sanity
Infrastructure as Code to Maintain your SanityInfrastructure as Code to Maintain your Sanity
Infrastructure as Code to Maintain your Sanity
Dewey Sasser
 
Forcepoint Dynamic Data Protection
Forcepoint Dynamic Data ProtectionForcepoint Dynamic Data Protection
Forcepoint Dynamic Data Protection
MarketingArrowECS_CZ
 
Lean UX in the Enterprise - June 10th Meetup
Lean UX in the Enterprise - June 10th MeetupLean UX in the Enterprise - June 10th Meetup
Lean UX in the Enterprise - June 10th Meetup
Anthony Viviano
 

Similar to Friction as a Function in Cyber-Security - Meirav Har-Paz (20)

Appzlicious Smart Apps Presentation
Appzlicious Smart Apps PresentationAppzlicious Smart Apps Presentation
Appzlicious Smart Apps Presentation
 
Keeping it Snappy: Improving Website Performance
Keeping it Snappy: Improving Website PerformanceKeeping it Snappy: Improving Website Performance
Keeping it Snappy: Improving Website Performance
 
0 for 3: Edtech Startup Lessons Learned
0 for 3: Edtech Startup Lessons Learned0 for 3: Edtech Startup Lessons Learned
0 for 3: Edtech Startup Lessons Learned
 
Scrum under a waterfall
Scrum under a waterfallScrum under a waterfall
Scrum under a waterfall
 
Android Advanced Techniques
Android Advanced TechniquesAndroid Advanced Techniques
Android Advanced Techniques
 
Our continuous delivery journey
Our continuous delivery journeyOur continuous delivery journey
Our continuous delivery journey
 
Velocity_Conference
Velocity_ConferenceVelocity_Conference
Velocity_Conference
 
Self-Service Operations: Because Failure Still Happens (Developer Edition)
Self-Service Operations: Because Failure Still Happens (Developer Edition)Self-Service Operations: Because Failure Still Happens (Developer Edition)
Self-Service Operations: Because Failure Still Happens (Developer Edition)
 
Design at TransferWise
Design at TransferWiseDesign at TransferWise
Design at TransferWise
 
Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...
Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...
Como implementar segurança sem afetar a experiência do cliente | Trilha de Pr...
 
Security Teams & Tech In A Cloud World
Security Teams & Tech In A Cloud WorldSecurity Teams & Tech In A Cloud World
Security Teams & Tech In A Cloud World
 
Operations as a Service: Because Failure Still Happens
Operations as a Service: Because Failure Still Happens Operations as a Service: Because Failure Still Happens
Operations as a Service: Because Failure Still Happens
 
Agile Resiliency: How CMMI can make Agile thrive and survive
Agile Resiliency: How CMMI can make Agile thrive and surviveAgile Resiliency: How CMMI can make Agile thrive and survive
Agile Resiliency: How CMMI can make Agile thrive and survive
 
What our Partners and Customers are saying about Webroot SecureAnywhere Busin...
What our Partners and Customers are saying about Webroot SecureAnywhere Busin...What our Partners and Customers are saying about Webroot SecureAnywhere Busin...
What our Partners and Customers are saying about Webroot SecureAnywhere Busin...
 
Cloud, DevOps and the New Security Practitioner
Cloud, DevOps and the New Security PractitionerCloud, DevOps and the New Security Practitioner
Cloud, DevOps and the New Security Practitioner
 
Erase and Rewind - Open Web Camp 2015
Erase and Rewind - Open Web Camp 2015Erase and Rewind - Open Web Camp 2015
Erase and Rewind - Open Web Camp 2015
 
Abusing the Cloud for Fun and Profit
Abusing the Cloud for Fun and ProfitAbusing the Cloud for Fun and Profit
Abusing the Cloud for Fun and Profit
 
Infrastructure as Code to Maintain your Sanity
Infrastructure as Code to Maintain your SanityInfrastructure as Code to Maintain your Sanity
Infrastructure as Code to Maintain your Sanity
 
Forcepoint Dynamic Data Protection
Forcepoint Dynamic Data ProtectionForcepoint Dynamic Data Protection
Forcepoint Dynamic Data Protection
 
Lean UX in the Enterprise - June 10th Meetup
Lean UX in the Enterprise - June 10th MeetupLean UX in the Enterprise - June 10th Meetup
Lean UX in the Enterprise - June 10th Meetup
 

Recently uploaded

Y-Combinator seed pitch deck template PP
Y-Combinator seed pitch deck template PPY-Combinator seed pitch deck template PP
Y-Combinator seed pitch deck template PP
c5vrf27qcz
 
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's TipsGetting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
ScyllaDB
 
Day 2 - Intro to UiPath Studio Fundamentals
Day 2 - Intro to UiPath Studio FundamentalsDay 2 - Intro to UiPath Studio Fundamentals
Day 2 - Intro to UiPath Studio Fundamentals
UiPathCommunity
 
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
"Frontline Battles with DDoS: Best practices and Lessons Learned",  Igor Ivaniuk"Frontline Battles with DDoS: Best practices and Lessons Learned",  Igor Ivaniuk
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
Fwdays
 
MySQL InnoDB Storage Engine: Deep Dive - Mydbops
MySQL InnoDB Storage Engine: Deep Dive - MydbopsMySQL InnoDB Storage Engine: Deep Dive - Mydbops
MySQL InnoDB Storage Engine: Deep Dive - Mydbops
Mydbops
 
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
AlexanderRichford
 
Must Know Postgres Extension for DBA and Developer during Migration
Must Know Postgres Extension for DBA and Developer during MigrationMust Know Postgres Extension for DBA and Developer during Migration
Must Know Postgres Extension for DBA and Developer during Migration
Mydbops
 
JavaLand 2024: Application Development Green Masterplan
JavaLand 2024: Application Development Green MasterplanJavaLand 2024: Application Development Green Masterplan
JavaLand 2024: Application Development Green Masterplan
Miro Wengner
 
Northern Engraving | Modern Metal Trim, Nameplates and Appliance Panels
Northern Engraving | Modern Metal Trim, Nameplates and Appliance PanelsNorthern Engraving | Modern Metal Trim, Nameplates and Appliance Panels
Northern Engraving | Modern Metal Trim, Nameplates and Appliance Panels
Northern Engraving
 
PRODUCT LISTING OPTIMIZATION PRESENTATION.pptx
PRODUCT LISTING OPTIMIZATION PRESENTATION.pptxPRODUCT LISTING OPTIMIZATION PRESENTATION.pptx
PRODUCT LISTING OPTIMIZATION PRESENTATION.pptx
christinelarrosa
 
A Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's ArchitectureA Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's Architecture
ScyllaDB
 
Astute Business Solutions | Oracle Cloud Partner |
Astute Business Solutions | Oracle Cloud Partner |Astute Business Solutions | Oracle Cloud Partner |
Astute Business Solutions | Oracle Cloud Partner |
AstuteBusiness
 
ScyllaDB Tablets: Rethinking Replication
ScyllaDB Tablets: Rethinking ReplicationScyllaDB Tablets: Rethinking Replication
ScyllaDB Tablets: Rethinking Replication
ScyllaDB
 
Christine's Supplier Sourcing Presentaion.pptx
Christine's Supplier Sourcing Presentaion.pptxChristine's Supplier Sourcing Presentaion.pptx
Christine's Supplier Sourcing Presentaion.pptx
christinelarrosa
 
Mutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented ChatbotsMutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented Chatbots
Pablo Gómez Abajo
 
Apps Break Data
Apps Break DataApps Break Data
Apps Break Data
Ivo Velitchkov
 
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
Jason Yip
 
The Microsoft 365 Migration Tutorial For Beginner.pptx
The Microsoft 365 Migration Tutorial For Beginner.pptxThe Microsoft 365 Migration Tutorial For Beginner.pptx
The Microsoft 365 Migration Tutorial For Beginner.pptx
operationspcvita
 
Dandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity serverDandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity server
Antonios Katsarakis
 
"$10 thousand per minute of downtime: architecture, queues, streaming and fin...
"$10 thousand per minute of downtime: architecture, queues, streaming and fin..."$10 thousand per minute of downtime: architecture, queues, streaming and fin...
"$10 thousand per minute of downtime: architecture, queues, streaming and fin...
Fwdays
 

Recently uploaded (20)

Y-Combinator seed pitch deck template PP
Y-Combinator seed pitch deck template PPY-Combinator seed pitch deck template PP
Y-Combinator seed pitch deck template PP
 
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's TipsGetting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
Getting the Most Out of ScyllaDB Monitoring: ShareChat's Tips
 
Day 2 - Intro to UiPath Studio Fundamentals
Day 2 - Intro to UiPath Studio FundamentalsDay 2 - Intro to UiPath Studio Fundamentals
Day 2 - Intro to UiPath Studio Fundamentals
 
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
"Frontline Battles with DDoS: Best practices and Lessons Learned",  Igor Ivaniuk"Frontline Battles with DDoS: Best practices and Lessons Learned",  Igor Ivaniuk
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
 
MySQL InnoDB Storage Engine: Deep Dive - Mydbops
MySQL InnoDB Storage Engine: Deep Dive - MydbopsMySQL InnoDB Storage Engine: Deep Dive - Mydbops
MySQL InnoDB Storage Engine: Deep Dive - Mydbops
 
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
QR Secure: A Hybrid Approach Using Machine Learning and Security Validation F...
 
Must Know Postgres Extension for DBA and Developer during Migration
Must Know Postgres Extension for DBA and Developer during MigrationMust Know Postgres Extension for DBA and Developer during Migration
Must Know Postgres Extension for DBA and Developer during Migration
 
JavaLand 2024: Application Development Green Masterplan
JavaLand 2024: Application Development Green MasterplanJavaLand 2024: Application Development Green Masterplan
JavaLand 2024: Application Development Green Masterplan
 
Northern Engraving | Modern Metal Trim, Nameplates and Appliance Panels
Northern Engraving | Modern Metal Trim, Nameplates and Appliance PanelsNorthern Engraving | Modern Metal Trim, Nameplates and Appliance Panels
Northern Engraving | Modern Metal Trim, Nameplates and Appliance Panels
 
PRODUCT LISTING OPTIMIZATION PRESENTATION.pptx
PRODUCT LISTING OPTIMIZATION PRESENTATION.pptxPRODUCT LISTING OPTIMIZATION PRESENTATION.pptx
PRODUCT LISTING OPTIMIZATION PRESENTATION.pptx
 
A Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's ArchitectureA Deep Dive into ScyllaDB's Architecture
A Deep Dive into ScyllaDB's Architecture
 
Astute Business Solutions | Oracle Cloud Partner |
Astute Business Solutions | Oracle Cloud Partner |Astute Business Solutions | Oracle Cloud Partner |
Astute Business Solutions | Oracle Cloud Partner |
 
ScyllaDB Tablets: Rethinking Replication
ScyllaDB Tablets: Rethinking ReplicationScyllaDB Tablets: Rethinking Replication
ScyllaDB Tablets: Rethinking Replication
 
Christine's Supplier Sourcing Presentaion.pptx
Christine's Supplier Sourcing Presentaion.pptxChristine's Supplier Sourcing Presentaion.pptx
Christine's Supplier Sourcing Presentaion.pptx
 
Mutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented ChatbotsMutation Testing for Task-Oriented Chatbots
Mutation Testing for Task-Oriented Chatbots
 
Apps Break Data
Apps Break DataApps Break Data
Apps Break Data
 
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
 
The Microsoft 365 Migration Tutorial For Beginner.pptx
The Microsoft 365 Migration Tutorial For Beginner.pptxThe Microsoft 365 Migration Tutorial For Beginner.pptx
The Microsoft 365 Migration Tutorial For Beginner.pptx
 
Dandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity serverDandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity server
 
"$10 thousand per minute of downtime: architecture, queues, streaming and fin...
"$10 thousand per minute of downtime: architecture, queues, streaming and fin..."$10 thousand per minute of downtime: architecture, queues, streaming and fin...
"$10 thousand per minute of downtime: architecture, queues, streaming and fin...
 

Friction as a Function in Cyber-Security - Meirav Har-Paz