The objective of this work is to design/select a security warning, and evaluate it using the NEAT and SPRUCE criteria. If you choose to work with an existing security warning, clear photographs should be provided to illustrate the security warning you selected

1. Provide the security warning youve designed.

2. What is the context in which this is used?

3. Provide your evaluation of the security warning using the NEAT and SPRUCE criteria. Briefly discuss each element of NEAT and SPRUCE as it is used or neglected in your security warning.

NEAT: Ask yourself: Is your security or privacy UX:

Necessary? Can you change the architecture to eliminate or defer this user decision?

Explained? Does your UX present all the information the user needs to make this decision? Have you followed SPRUCE (below)?

Actionable? Have you determined a set of steps the user will realistically be able to take to make the decision correctly?

Tested? Have you checked that your UX is NEAT for all scenarios, both benign and malicious?

SPRUCE: When you involve the user in a NEAT security or privacy decision, explain the decision using these 6 elements:

Source: State who or what is asking the user to make a decision.

Process: Give the user actionable steps to follow to make a good decision.

Risk: Explain what bad thing could happen if the user makes the wrong decision.

Unique knowledge user has: Tell the user what information they bring to the decision.

Choices: List available options and clearly recommend one.

Evidence: Highlight information the users should factor in or exclude in making the decision.