Towards the Systematic Development of Contextualized Security Interventions1

Current warnings during daily Web browsing demonstrate how difficult it is for developers to craft precise and comprehensible security interventions. While researchers have found that personal contextualization of interventions help in security-critical applications, taking this approach leads to an overwhelming range of options of how and when to intervene as well as which factors to consider. To make contextualized security interventions feasible, we need to support developers in selecting the relevant factors for their applications and support them in deriving the appropriate intervention strategy and content. In this paper, we propose a security intervention framework and methodology which provides such a support.