ObservedBehavioral signal
Evidence
Evidence reveals the patterns behind human cyber risk.
More than 107,000 research observations, peer-reviewed analysis, and international scholarly exchange form an evidence base for understanding how psychology, behavior, and communication shape cybersecurity outcomes.
Behavioral evidence intelligence107,520 observations → defensible insight
MeasuredPeer-reviewed evidence
AppliedDecision intelligence
Research in one minute
The evidence points to one consistent conclusion.
Attackers exploit human and organizational conditions as deliberately as they exploit technical weaknesses.
Human behavior
Materially influences cybersecurity outcomes.
Influence
Trust, authority, urgency, and communication shape cyber risk.
Technical defense
Remains essential—but cannot address the human dimension alone.
Organizational context
Shapes how exposure forms and how decisions are made.
Human-centered defense
Complements technical controls with behavioral understanding.
Evidence chain
From observation to defensible insight.
Evidence becomes useful when observations survive measurement, review, publication, and scholarly exchange before they are translated into intelligence.
01
Observe107,520Research observations
Large-scale observations establish the empirical base.
02
MeasurePatternsPsychological patterns
Factors and attacker sophistication become measurable research problems.
03
TestReviewPeer review
Findings are documented, challenged, and refined through scholarly review.
04
PublishIEEE + SpringerResearch record
Peer-reviewed work makes the evidence inspectable.
05
ExchangeGlobalScholarly forums
Research is presented across international academic and security communities.
06
TranslateActionDefensive intelligence
Evidence becomes behavioral intelligence and organizational guidance.
Research record
107,520+Observations
IEEEPeer review
SpringerScholarship
GlobalScholarly exchange
Research program
A sustained investigation into the human mechanics of cyber risk.
The program began with doctoral research that reframed social engineering as a human decision problem, then matured through peer-reviewed scholarship, measurement, synthesis, and behavioral characterization.
Foundational researchDoctoral dissertation
University of Colorado Colorado SpringsCharacterizing Internet-Based Social Engineering Attacks Through a Psychological Lens
This doctoral research established the psychological perspective that became the foundation for the subsequent IEEE, Springer, and international research contributions presented below.
Intellectual contributionCybersecurity analysis expands from the technical attack to the human decision process.
Peer-reviewed scholarshipValidation, measurement, synthesis, and behavioral characterization.
Four published contributions extend the foundational investigation into an inspectable research record.
Proceedings of the IEEE2024
Survey architectureInternet-Based Social Engineering Psychology, Attacks, and Defenses: A Survey
A comprehensive synthesis connecting psychology, social engineering attacks, human vulnerability, and defensive strategy.
View publication record →IEEE Access2024
Sophistication indexQuantifying Psychological Sophistication of Malicious Emails
A measurement-oriented approach to identifying cognitive and behavioral manipulation patterns in malicious emails.
View publication record →Springer SciSec2025
Factor patternsCharacterizing the Evolution of Psychological Factors Exploited by Malicious Emails
Evidence showing how recurring psychological factors become exploitable patterns in cyber attacks.
View publication record →Springer SciSec2025
Tactic evolutionCharacterizing the Evolution of Psychological Tactics and Techniques Exploited by Malicious Emails
Analysis of attacker tactics and techniques as decision-shaping mechanisms rather than simple message content.
View publication record →Evidence milestones
A connected record of measurement, publication, and scholarly exchange.
The record progresses by strengthening the evidence—not by repeating the research journey already shown on the Research page.
2022
01Psychological factors identified
Focused analysis examines recurring psychological factors in malicious communication.
2023
02Sophistication quantified
Research advances from describing malicious emails toward measuring psychological sophistication.
2024
03Human-centered evidence consolidated
Large-scale analysis and the Proceedings of the IEEE survey establish a broader evidence base.
2025
04Tactics and factors characterized
Attacker tactics, techniques, and psychological factors are documented through Springer research.
Scholarly exchange
Evidence tested across research and security communities.
International presentation places the work in scholarly conversation and connects research quality with practitioner relevance.
CCDResearch exchangeCopenhagen · Melbourne · Colorado · UCCS / UW Tacoma
Copenhagen
SciSec 2024Two research presentations on psychological factors, tactics, and techniques.
Melbourne
SciSec 2023Psychological sophistication research presented internationally.
Colorado
N3SP · USAFAResearch presented to a national security and cyber audience.
UCCS / UW Tacoma
CWSSPResearch shared across academic and practitioner communities.
From evidence to intelligence
Research becomes valuable when findings change what defenders can see.
Cognitive Cyber Defense translates human-centered research into intelligence that helps organizations understand exposure before treating every human risk problem as an awareness problem.
From evidence to action
Evidence should inform strategy.
Explore how human-centered research can strengthen the way your organization understands exposure, prioritizes intervention, and makes security decisions.