Daniel W. Woods

Informatics Forum

10 Crichton St


United Kingdom

I research the economics of cybersecurity and privacy, focusing on:

  • Cyber insurance
  • Digital risk management
  • Cyber risk quantification
  • Incident response
  • How the legal system impacts cybersecurity
  • Privacy preference signals
  • 0-Day exploit brokers and prices

I am a Lecturer in Cybersecurity at the University of Edinburgh’s School of Informatics. My academic position is jointly appointed by the British University in Dubai, which means I periodically head out there to teach and collaborate.

Looking further back, I completed my PhD at the University of Oxford, supervised by Andy Simpson. During the PhD, I visited the Security Economics Lab at the University of Tulsa on a Fulbright Scholar Award to work with Tyler Moore. After the PhD, I did a postdoc (and a lot of skiing/cycling) at the University of Innsbruck in the Security and Privacy Lab, led by Rainer Böhme.


Jun 6, 2023 I will present a talk titled “Lemons and Liability: Cyber Warranties as an Experiment in Software Regulation” at BlackHat 2023.
Apr 6, 2023 My paper titled “Personal Identity Insurance: Coverage and Pricing in the US” was published in the Journal of Financial Transformation .
Mar 6, 2023 My paper titled “A Turning Point for Cyber Insurance” was published in the Communications of the ACM.
Oct 17, 2022 Our paper titled “Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach Attorneys” was accepted to USENIX Security.
Sep 18, 2022 Rachiyta Jain joined the PRINSUR project as a research associate.

selected publications

  1. Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach Attorneys
    Woods, Daniel W., Böhme, Rainer, Wolff, Josephine, and Schwarcz, Daniel
    USENIX Security Symposium 2023
  2. SoK: Quantifying Cyber Risk
    Woods, Daniel W., and Böhme, Rainer
    IEEE Symposium on Security and Privacy 2021
  3. The County Fair Cyber Loss Distribution: Drawing Inference from Insurance Prices
    Woods, Daniel W., Moore, Tyler, and Simpson, Andrew C.
    Digital Threats: Research and Practice 2021