PhD Studentship: Cyber Risk Management through Cognitive Behavioural Analysis

Project summary

This project provides an annual stipend of £19,237.

In a world where cyber threats are constantly evolving, where standards and frameworks are maturing, one critical factor remains: human behaviour. From Edward Snowden’s historic National Security Agency leak to the shocking statistic that 95% of cyber attacks succeed due to human error, it’s clear that human behaviour is crucial to safeguarding organisational security.

This multi-disciplinary project will give you the opportunity to contribute to cutting-edge research aimed at investigating the intersection of computing and psychology. Your role will involve designing and executing experiments, analysing data, and developing novel techniques informed by behavioural science to address human-centric cyber threats across various industries.

If you’re ready to be part of a collaborative team dedicated to innovation and eager to make a difference in the world of cyber security, then we want to hear from you.

Aims and objectives

The aim of the project is to develop processes, tools, and techniques to combat the growing socio-technical risks to information security across various industries. The main objectives include:

• Identifying the extent of the problem through a blended approach of quantitative and qualitative methods to explore why industries find this challenge overwhelming and struggle to implement effective techniques.
• Investigating cognitive behaviour patterns such as ‘when’ and ‘why’ people engage in certain adverse behaviours by analysing conscious thoughts, motivations, beliefs, social influence, contextual effects (such as workplace surroundings), and habits.
• Proposing new procedures and policies, considering ethical considerations and leveraging advances in technology (such as artificial intelligence), to assist in mitigating this specific risk.

Specific requirements of the project

Essential requirements

• The candidates should have a strong research background in information security, cyber risk management, security policies and procedures.
• A masters degree in computer science, information technology, cyber security, or a related field is preferred.

Desirable requirements

• Interest in cognitive behavioural analysis techniques and methodologies.
• Experience with data analysis tools and programming languages, such as Python, R, or Matlab
• Industry experience in cyber security/risk management.
• Knowledge of cyber-physical systems.
• Knowledge of regulatory frameworks and standards in cyber security, such as the National Institute of Standards and Technology NIST standards, the General Data Protection Regulation and the Health Insurance Portability and Accountability Act. 

How to apply

Interested applicants should contact Dr Yakubu Tsado for an informal discussion.

To apply you will need to complete the online application form for a full-time PhD in Computer Science (or download the PGR application form).

You should also complete the PGR thesis proposal and a Narrative CV (supplementary information) form addressing the project’s aims and objectives, demonstrating how the skills you have maps to the area of research and why you see this area as being of importance and interest. 

If applying online, you will need to upload your statement in the supporting documents section, or email the application form and statement to PGRAdmissions@mmu.ac.uk.

Closing date: 14 October 2024.

Expected start date: January 2025 for Home students and April 2025 for International students.

Please quote the reference: SciEng-2024-Cyber-Risk-Management

Advert information