I deliver research that enables the accurate and ethical measurement of security and cybercrime. By measuring security and cybercrime we can monitor improvement, evaluate interventions and inform regulators. This reveals which techniques work and provides the missing economic incentives to improve security and reduce cybercrime. I work with researchers across disciplines to understand the full picture. More information on my personal page.

I am Director of the University of Strathclyde's Academic Centre of Excellence in Cyber Security Research.