Publications: 'It Should Be Easy but... New Users' Experiences and Challenges with Secret Management Tools', 'A five-year-old could understand it' versus 'This is way too confusing': Exploring Non-expert Understandings and Perceptions of Cybersecurity Definitions', 'Who Comes Up with this Stuff? Interviewing Authors to Understand How They Produce Security Advice', 'Analyzing Cybersecurity Definitions for Non-experts', 'What Challenges Do Developers Face About Checked-in Secrets in Software Artifacts?', 'What are the Practices for Secret Management in Software Artifacts?', 'Investigating Web Service Account Remediation Advice'.
Research Experience
Research Staff Member at the Institute for Defense Analyses, using qualitative and quantitative research methods to assess technologies and systems used by government-sponsored organizations; worked on projects analyzing cybersecurity definitions for non-experts and the influence of observable characteristics within phishing emails at NIST.
Education
Ph.D. in Computer Science from North Carolina State University (NCSU); Graduate Student Measurement Science and Engineering Fellow at the National Institute of Standards and Technology (NIST).
Background
Currently a Research Staff Member at the Institute for Defense Analyses, using qualitative and quantitative research methods to assess technologies and systems used by government-sponsored organizations. During his doctoral studies in computer science at North Carolina State University (NCSU), he was a member of the Wolfpack Security and Privacy Research Lab, with broader research interests including usable security and secret management.