Information and Cyber Security

Information and cyber security research examines how organizations protect their data, systems, and people from both external attacks and internal failures—treating security not just as a technical problem but as a behavioral and institutional one. A central concern is understanding why employees comply with, or deviate from, security policies, and how factors like fear, rational self-interest, organizational culture, and management pressure shape those decisions. Researchers also model adversarial dynamics using tools from game theory and attack graphs to anticipate how threats evolve and how defenses can be allocated under uncertainty. Open questions include how to design interventions that shift security behavior durably rather than temporarily, and how insider threat risk can be measured and mitigated without eroding the trust that organizations depend on to function.

Works

98,275

Total citations

531,970

Keywords

Information SecurityPolicy ComplianceSecurity AwarenessDeterrenceAttack GraphsRisk Management