01
FoundationTechnical systems
Technical foundation
Computer science, software engineering, and information assurance formed the base for studying cyber risk.
Research
Research that changes cybersecurity thinking.
Cognitive Cyber Defense studies how attackers exploit cognition, trust, communication, authority, urgency, and organizational behavior — then turns that evidence into better security decisions.
Why this research exists
Cybersecurity has protected systems better than it has understood people.
Research Path
From technical security to human-centered cyber defense.
The research program evolved by widening the defensive lens — from systems, to organizations, to human behavior, and finally to evidence-informed advisory.
02
ExpansionOrganizational context
Security leadership
Cybersecurity and leadership training connected technical defense with organizational decisions.
03
DiscoveryCognition + behavior
Human-centered research
LCD research examined social engineering, phishing psychology, malicious communication, and behavioral susceptibility.
04
TranslationEvidence → resilience
Evidence to advisory
Research is translated into executive understanding, strategy, and resilience.
Research EvolutionEach stage expands what cybersecurity must understand.
Technical defense remains essential. The research adds the human and organizational intelligence required to make that defense more complete.
Research Domains
A research agenda for the human side of cyber risk.
The work is not limited to phishing. It studies the deeper relationship between cognition, communication, organizational behavior, and security decision-making.
Research ArchitectureFour lenses. One connected problem.
Each domain examines a different layer of human-centered cyber risk. Together, they turn individual behavior and organizational context into evidence that can inform defense.
01Cognition
Cognitive Security
Perception, attention, urgency, trust, and decision-making as part of the defensive system.
02Influence
Social Engineering
How attackers exploit communication, authority, identity, emotion, and organizational context.
03Intelligence
Behavioral Threat Intelligence
Turning persuasion patterns into intelligence that leaders and defenders can act on.
04Exposure
Human Attack Surface
Mapping roles, workflows, authority paths, and trust relationships that create exploitable exposure.
CCDHuman-Centered
Cyber RiskUnderstand → Connect → Defend
Cyber RiskUnderstand → Connect → Defend
Integrated Research LogicUnderstand how people perceive risk. Examine how influence operates. Convert patterns into intelligence. Map where exposure emerges.
Evidence Base
Research authority is demonstrated, not claimed.
The research record moves from large-scale observation to peer-reviewed analysis, published findings, and international scholarly exchange.
Evidence StandardMeasured. Peer reviewed. Published. Presented.
Authority comes from a visible chain of evidence — not from positioning language alone.
01107,520+research observations analyzed
02IEEEpeer-reviewed journal publication
03Springerconference and book chapter contributions
04Globalresearch presented internationally
Selected Research RecordPeer-reviewed work across IEEE and Springer.
01
Proceedings of the IEEE
Internet-based social engineering psychology, attacks, and defenses: a survey
Peer-reviewed journal article · 2024
02
IEEE Access
Quantifying psychological sophistication of malicious emails
Peer-reviewed journal article · 2024
03
Springer LNCS · SciSec
Characterizing the evolution of psychological tactics and techniques exploited by malicious emails
Conference / book chapter contribution · 2025
04
Springer LNCS · SciSec
Characterizing the evolution of psychological factors exploited by malicious emails
Conference / book chapter contribution · 2025
Research CredibilityScale establishes the empirical base. Peer review tests the work. Publication makes it inspectable. Presentation places it in global scholarly conversation.
Research Philosophy
Evidence creates understanding.Understanding improves decisions.Decisions build resilience.
Operating Principle
Research has value when it changes what defenders can see, what leaders can understand, and what organizations can do next.