Security metrics have received significant attention. However, they have not been
systematically explored based on the understanding of attack-defense interactions, which …

Online crime has increased in severity and frequency over the past two decades. However,
although several scientific disciplines have commonly employed criminological theories to …

The state of advice given to people today on how to stay safe online has plenty of room for
improvement. Too many things are asked of them, which may be unrealistic, time …

This paper introduces a causal model inspired by structural equation modeling that explains
cyber risk outcomes in terms of latent factors measured using reflexive indicators. First, we …

We investigate the anecdotal belief that end users will pick up and plug in USB flash drives
they find by completing a controlled experiment in which we drop 297 flash drives on a large …

The current evolution of the cyber-threat ecosystem shows that no system can be considered
invulnerable. It is therefore important to quantify the risk level within a system and devise risk …

Described embodiments include a system that includes a monitoring agent, configured to
automatically monitor usage of a computing device by a user, and a processor. The …

Antivirus scanners are designed to detect malware and, to a lesser extent, to label
detections based on a family association. The labeling provided by AV vendors has many …

Computer security problems often occur when there are disconnects between users'
understanding of their role in computer security and what is expected of them. To help users …

Cyber attacks have increased in number and complexity in recent years, and companies
and organizations have accordingly raised their investments in more robust infrastructure to …