The Friction-Free Threat: Mapping UX Design Affordances to Insider Security Risks in Small-Scale Enterprise Devices
Year: 2026
Type: conference-paper
Abstract: Small-scale digital devices such as smartwatches, augmented reality (AR) glasses, voice assistants and translators, and handheld IoT scanners are increasingly being used by employees inside enterprise environments, whether for personal or professional reasons. While these devices improve work efficiency through frictionless user experience (UX) and seamless connectivity, their passive sensing and always-on capabilities introduce significant insider security and forensic risks. This paper presents a UX-driven insider threat taxonomy that classifies threat behaviors into three categories of human intent: inadvertent, negligent, and malicious. A proof-of-concept forensic triage framework is also proposed, capable of ingesting device logs, performing automated behavioral classification, and generating event-chain visualizations for forensic analysis. Experimental case studies demonstrated the framework's ability to classify insider threat behaviors and to visualize causal forensic flows across multiple device interactions. The proposed approach provides both a structured taxonomy and a practical forensic implementation that support cybersecurity governance and behavioral threat analysis in IoT-rich enterprise environments.
Institution: Zayed University
Language: English
Topic: Digital and Cyber Forensics
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: hybrid
OpenAlex ID: W7225158552