title: Security-by-Experiment: Lessons from Responsible Deployment in Cyberspace.
abstract: Conceiving new technologies as social experiments is a means to discuss responsible deployment of technologies that may have unknown and potentially harmful side-effects. Thus far, the uncertain outcomes addressed in the paradigm of new technologies as social experiments have been mostly safety-related, meaning that potential harm is caused by the design plus accidental events in the environment. In some domains, such as cyberspace, adversarial agents (attackers) may be at least as important when it comes to undesirable effects of deployed technologies. In such cases, conditions for responsible experimentation may need to be implemented differently, as attackers behave strategically rather than probabilistically. In this contribution, we outline how adversarial aspects are already taken into account in technology deployment in the field of cyber security, and what the paradigm of new technologies as social experiments can learn from this. In particular, we show the importance of adversarial roles in social experiments with new technologies.
authors.affiliation: Delft University of Technology, CyberSecurity@TUDelft, P.O. Box 5015, 2600 GA, Delft, The Netherlands. w.pieters@tudelft.nl.|University of Twente, Services, Cybersecurity and Safety, P.O. Box 217, 7500 AE, Enschede, The Netherlands. w.pieters@tudelft.nl.
authors.forename: Wolter
authors.initials: W
authors.lastname: Pieters
authors.affiliation: Delft University of Technology, CyberSecurity@TUDelft, P.O. Box 5015, 2600 GA, Delft, The Netherlands.
authors.forename: Dina
authors.initials: D
authors.lastname: Hadžiosmanović
authors.affiliation: 3TU.Ethics @ Eindhoven, Eindhoven University of Technology, P.O. Box 513, 5600 MB, Eindhoven, The Netherlands.
authors.forename: Francien
authors.initials: F
authors.lastname: Dechesne
mesh_terms: D016494:Computer Security / Q000941:ethics / Q000592:standards*; D036262:Empirical Research; D020407:Internet; D008962:Models, Theoretical; D012308:Risk Management
keywords: Adversarial experiments; Cyber security; Empirical security; Responsible experimentation; Security-by-experiment; Social experiments