"The Thing Doesn't Have a Name": Learning from Emergent Real-World Interventions in
summary
Coordinating with an ISP and using network data to match a Mirai scan signature, researchers run remote think-aloud observations with 17 customers asked to follow five remediation steps (change credentials, reset device, etc.). Only only 4 of 17 completed all five steps. Participants use heuristics—process of elimination, unplugging devices, family help—or external searches, face unclear instructions and no feedback on success, and often cannot confirm whether remediation actually worked.
AI-written summary · about
related talks
14mThe Challenges Of Remediation During A Cyber Incident
23mA Manufacturer's Post-Shipment Approach to Fend-Off IoT Malware in Home Appliances
10mSpy-oT: Understanding How Users Learn to Use Internet of Things Devices For Abusive...
01h 33mInnovate with Resilience!
27m“Why are they asking me to do this?” or Adventures in IR Land
24mIf They Can Touch It, They Own It: The Stories We Tell...
51mRemediation-Aware Reachability: Patching Containers, Prioritizing with Agentic-CTI, and Scaling...
30mNetwork Technocracy: A Tale of Monitoring, Spoofing, Intercepting and Social Engineering