{"id":"https://openalex.org/W4366548794","doi":"https://doi.org/10.1145/3544548.3581484","title":"Models of Applied Privacy (MAP): A Persona Based Approach to Threat Modeling","display_name":"Models of Applied Privacy (MAP): A Persona Based Approach to Threat Modeling","publication_year":2023,"publication_date":"2023-04-19","ids":{"openalex":"https://openalex.org/W4366548794","doi":"https://doi.org/10.1145/3544548.3581484"},"language":"en","primary_location":{"id":"doi:10.1145/3544548.3581484","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3544548.3581484","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3544548.3581484","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3544548.3581484","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002245805","display_name":"Jayati Dev","orcid":"https://orcid.org/0000-0003-2673-5964"},"institutions":[{"id":"https://openalex.org/I2800752714","display_name":"Comcast (United States)","ror":"https://ror.org/00sgxyw28","country_code":"US","type":"company","lineage":["https://openalex.org/I2800752714"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jayati Dev","raw_affiliation_strings":["Comcast, United States"],"raw_orcid":"https://orcid.org/0000-0003-2673-5964","affiliations":[{"raw_affiliation_string":"Comcast, United States","institution_ids":["https://openalex.org/I2800752714"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007001353","display_name":"Bahman Rashidi","orcid":"https://orcid.org/0000-0001-8817-0757"},"institutions":[{"id":"https://openalex.org/I2800752714","display_name":"Comcast (United States)","ror":"https://ror.org/00sgxyw28","country_code":"US","type":"company","lineage":["https://openalex.org/I2800752714"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bahman Rashidi","raw_affiliation_strings":["Comcast, United States"],"raw_orcid":"https://orcid.org/0000-0001-8817-0757","affiliations":[{"raw_affiliation_string":"Comcast, United States","institution_ids":["https://openalex.org/I2800752714"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032631532","display_name":"Vaibhav Garg","orcid":null},"institutions":[{"id":"https://openalex.org/I2800752714","display_name":"Comcast (United States)","ror":"https://ror.org/00sgxyw28","country_code":"US","type":"company","lineage":["https://openalex.org/I2800752714"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vaibhav Garg","raw_affiliation_strings":["Comcast, United States"],"raw_orcid":"https://orcid.org/0000-0002-1796-0177","affiliations":[{"raw_affiliation_string":"Comcast, United States","institution_ids":["https://openalex.org/I2800752714"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2800752714"],"apc_list":null,"apc_paid":null,"fwci":1.5417,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.82262211,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"15"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T14074","display_name":"Persona Design and Applications","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T14074","display_name":"Persona Design and Applications","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10803","display_name":"Innovative Human-Technology Interaction","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11114","display_name":"Service and Product Innovation","score":0.9646999835968018,"subfield":{"id":"https://openalex.org/subfields/1406","display_name":"Marketing"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/persona","display_name":"Persona","score":0.7474696040153503},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7008906006813049},{"id":"https://openalex.org/keywords/operationalization","display_name":"Operationalization","score":0.6668280363082886},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"Privacy by Design","score":0.5682777762413025},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.5358096361160278},{"id":"https://openalex.org/keywords/product","display_name":"Product (mathematics)","score":0.5274814963340759},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5210185050964355},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.50201416015625},{"id":"https://openalex.org/keywords/harm","display_name":"Harm","score":0.48523879051208496},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4805343747138977},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.41082069277763367},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3248648941516876},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.18986791372299194}],"concepts":[{"id":"https://openalex.org/C313442","wikidata":"https://www.wikidata.org/wiki/Q778556","display_name":"Persona","level":2,"score":0.7474696040153503},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7008906006813049},{"id":"https://openalex.org/C9354725","wikidata":"https://www.wikidata.org/wiki/Q286017","display_name":"Operationalization","level":2,"score":0.6668280363082886},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.5682777762413025},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.5358096361160278},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.5274814963340759},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5210185050964355},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.50201416015625},{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.48523879051208496},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4805343747138977},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.41082069277763367},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3248648941516876},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.18986791372299194},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3544548.3581484","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3544548.3581484","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3544548.3581484","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3544548.3581484","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3544548.3581484","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3544548.3581484","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/12","score":0.6100000143051147,"display_name":"Responsible consumption and production"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4366548794.pdf","grobid_xml":"https://content.openalex.org/works/W4366548794.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W72496981","https://openalex.org/W572872720","https://openalex.org/W1538821400","https://openalex.org/W1970534474","https://openalex.org/W1973203990","https://openalex.org/W2048558983","https://openalex.org/W2109053564","https://openalex.org/W2125076921","https://openalex.org/W2169681803","https://openalex.org/W2418285495","https://openalex.org/W2539285340","https://openalex.org/W2586418126","https://openalex.org/W2756989338","https://openalex.org/W2810028966","https://openalex.org/W2981340892","https://openalex.org/W3014558812","https://openalex.org/W3093550423","https://openalex.org/W3162850400","https://openalex.org/W3180873398","https://openalex.org/W4226098675","https://openalex.org/W4231459167","https://openalex.org/W4237026975","https://openalex.org/W6602972026"],"related_works":["https://openalex.org/W2171996415","https://openalex.org/W2118333568","https://openalex.org/W2101582069","https://openalex.org/W2994243660","https://openalex.org/W3091445850","https://openalex.org/W2675231964","https://openalex.org/W2747442008","https://openalex.org/W2127814706","https://openalex.org/W315296216","https://openalex.org/W2954872289"],"abstract_inverted_index":{"The":[0],"paradigm":[1],"of":[2,19,38,122,134],"Privacy":[3],"by":[4,127],"Design":[5],"aims":[6],"to":[7,22,28,62,72,87,110],"integrate":[8],"privacy":[9,30,49,69,123,136],"early":[10],"in":[11],"the":[12,35,39,129,140],"product":[13,119],"development":[14],"life":[15],"cycle.":[16],"One":[17],"element":[18],"this":[20,42],"is":[21,59],"conduct":[23],"threat":[24,50,70,80,102],"modeling":[25,51],"with":[26],"developers":[27],"identify":[29],"threats":[31,116],"that":[32,58,101],"engender":[33],"from":[34,139],"architecture":[36],"design":[37],"product.":[40],"In":[41],"paper,":[43],"we":[44],"propose":[45],"a":[46,97,107,132],"systematic":[47],"lightweight":[48],"framework":[52,130],"(MAP)":[53],"based":[54,77,117],"on":[55,78,118],"attacker":[56],"personas":[57],"both":[60],"easy":[61],"operationalize":[63],"and":[64,84,113],"scale.":[65],"MAP":[66,95],"leverages":[67],"existing":[68],"frameworks":[71],"provide":[73],"an":[74],"operational":[75],"roadmap":[76],"relevant":[79,115],"actors,":[81],"associated":[82],"threats,":[83],"resulting":[85],"harm":[86],"individuals":[88],"as":[89,91,96,106],"well":[90],"organizations.":[92],"We":[93,125],"implement":[94],"persona":[98],"picker":[99],"tool":[100],"modelers":[103],"can":[104],"use":[105],"menu":[108],"select":[109],"identify,":[111],"investigate,":[112],"remediate":[114],"developer\u2019s":[120],"scope":[121],"risk.":[124],"conclude":[126],"testing":[128],"using":[131],"repository":[133],"207":[135],"breaches":[137],"extracted":[138],"VERIS":[141],"Community":[142],"Database.":[143]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}