This is my 3 minute pitch at the Google Security Summit, making a case for what I think academia and Google should be doing more of. The basic premise is, rather than creating new security mechanisms, let's look more at getting people to adopt best practices and features we've already created.

1. ©2015CarnegieMellonUniversity:1
Social Cybersecurity
• Overly focused on new mechanisms
• How can we get people to use what’s
already out there?
– Awareness, Knowledge, Motivation
• Social influences subtle but potent
– “80% of your neighbors save power”
– “Last person in room reused towel”
– Facebook study about voting

2. ©2015CarnegieMellonUniversity:2
Social Cybersecurity
• Through interviews, half of security
changes related to social [SOUPS 2014]
•
[CCS 2014]
• How to make security more observable?
• Can we make security “us” vs “me”?
• How does security diffuse? [CSCW 2015]