My research explores the incentive and information structures that determine how organisations make decisions about cybersecurity and privacy. In terms of available information, I have surveyed empirical approaches to quantifying cyber risk and invented my own. Turning to incentives, I have looked at: how cyber insurance influences security decisions made by policyholders; how warranties change the incentives for InfoSec vendors; and how consent management providers shape web privacy.
I am a Postdoctoral Fellow in the Department of Computer Science at the University of Innsbruck. I received my PhD from the Department of Computer Science at the University of Oxford. During my PhD, I visited the Security Economics Lab at the University of Tulsa as a Fulbright Cybersecurity Scholar.
|Apr 1, 2021||Matthias Dellago is joining our research group to work on the CEMDAT project, which was awarded to Andrew Simpson (co-PI) and me (PI) by AFOSR.|
|May 1, 2020||I start a Marie Curie Individual Fellowship working on the QCYRISK project, awarded by the European Commission.|
|Sep 1, 2019||I joined the Security and Privacy Lab at the University of Innsbruck.|
- SoK: Quantifying Cyber RiskIEEE Symposium on Security and Privacy 2021
- How Cyber Insurance Shapes Incident Response: A Mixed Methods StudyWorkshop on the Economics of Information Security (WEIS) 2021
- The County Fair Cyber Loss Distribution: Drawing Inference from Insurance PricesDigital Threats: Research and Practice 2021