The Hidden Gender Bias in Cybersecurity: Why Inclusive Design Matters

Her doctoral research explored the incorporation of interactive technologies in designing and experiencing interactive and XR experiences. During her postdoctoral research, Asreen focused more closely on cybersecurity from a human perspective, exploring 'gender-inclusive cybersecurity'—a human-centred approach to security. 

In today's interconnected world, cybersecurity is a growing concern for individuals and organizations alike. But have you ever considered that cybersecurity itself might be gendered? That the way security systems and technologies are designed may unintentionally exclude or even endanger certain groups? At RISE, along with researchers from around the world, we are exploring the critical link between cybersecurity and gender inclusivity. 

The Gendered World of Technology 

We already know that we live in a world shaped by biases—gender biases, economic biases, and societal biases. These biases extend into technology, influencing how security measures are designed and implemented. When cybersecurity strategies do not consider different lived experiences, they risk failing those who are most vulnerable. 

Case Study: Smart Locks and Domestic Abuse 

A compelling study from the UK analyzed the security mechanisms of smart home locks. The research revealed a significant oversight in the design of these locks—the assumption that threats always come from outside the home. 

However, this perspective neglects the reality that many cases of abuse occur within the home. In domestic abuse situations, an abuser may already have access to smart locks and security systems, using them to exert control rather than providing protection. This kind of security design flaw can create unintended opportunities for abuse, making it more difficult for victims—often women—to escape harmful situations. 

The Risk of Hacked IoT Devices 

Another area where gender and cybersecurity intersect is in the hacking of smart home devices. At RISE, one of our studies explored how people feel when their home IoT devices, such as security cameras, are compromised. Many users, particularly women, purchase these devices to feel safer—whether they live alone, have children, or want to monitor their home environment. 

However, these security devices can become a source of danger when poorly designed. There have been alarming reports of security cameras being hacked, allowing outsiders to monitor homes, collect personal data, or even interact with residents without consent. One case we examined involved a mother who installed a camera in her child's room for safety, only to discover that a hacker had exploited a design flaw, turning a security feature into a vulnerability. The hacker was able to access the device and communicate with the child. This breach exemplifies how flawed design in both technology and security can be manipulated by bad actors, transforming a protective measure into a direct threat to a family’s safety. 

Why Inclusive Security Design is Essential 

These examples highlight the urgent need for a more inclusive approach to cybersecurity. Security strategies must consider real-world scenarios, including the different ways people use technology based on their gender, social position, and lived experiences. By integrating a gender perspective into cybersecurity, we can: 

• Develop security systems that address diverse threat landscapes, including risks in both personal and public spaces. 
• Strengthen security measures to minimize vulnerabilities in connected technologies. 
• Promote technology that enhances safety and autonomy for all users ensuring inclusivity beyond just the majority. 

How RISE is Leading the Change 

At RISE, we are committed to advancing cybersecurity research that prioritizes inclusivity and real-world impact. Our studies, along with the work of researchers globally, emphasize that cybersecurity must be designed with all users in mind. Design should account for diverse needs, including those of marginalised groups, to prevent biases that could compromise security or usability. By addressing these biases and vulnerabilities, we can create technology that truly enhances security for everyone. 

For organizations and technology developers seeking to integrate inclusive cybersecurity principles, RISE provides research-driven insights and strategic guidance. Contact us to explore how we can support your efforts in designing safer and more inclusive digital security solutions. 

Reach out to learn more about our research and how we can help strengthen your cybersecurity approach. 

 Hanna Nordenö & Asreen Rostami