News story

Dr Shujun Li awarded new EPSRC project on human factors in cyber security

Dr Shujun Li, Senior Lecturer of the Department of Computer Science and Deputy Director of Surrey Centre for Cyber Security (SCCS), was recently awarded a new research project "COMMANDO-HUMANS: COMputational Modelling and Automatic Non-intrusive Detection Of HUMan behAviour based iNSecurity" by the EPSRC.

This project is one of six projects funded through a competitive call on Joint Singapore-UK Research in Cyber Security co-funded by the EPSRC and Singapore's NRF, which attracted 22 joint research proposals from UK and Singaporean researchers. The project is expected to start on 1st April 2016 and will last until 30th April 2018.

This project will involve Prof Robert H. Deng and Dr Yingjiu Li from the Singapore Management University as the main partner funded by Singapore's NRF, and also Dr Mohamed Ali (Dali) Kaafar and Dr Hassan Jameel Asghar from the NICTA (Australia) as unfunded collaborators. Dr Haiyue Yuan of the Department of Computer Science will be working on the project as a named Research Fellow.

This project aims at producing direct evidence that human behaviour related insecurity can be detected automatically by applying human cognitive models to model and simulate humans involved in security systems. A key outcome of the project will be a working software system that can be used for this purpose by researchers and practitioners. The project will focus on human user authentication systems as a representative use case and will produce new knowledge on the role of human behaviours in such systems and security systems in general. Both the software framework and new knowledge on human behaviours can also help address other challenges in cyber security such as detection of intruders/extremists requires knowledge on how they behave; protection of user privacy require knowledge on how human users handle personal data; policy makers need to understand behaviours of their organisations' employees and human attackers targeting their organisations to make more informed decisions.

More details about the project can be found here. A dedicated project website http://www.commando-humans.net/ will be created to publicise the project's main outcomes.

New Update: This project was featured in a joint news release of EPSRC, the Cabinet Office and Singapore's NRF (National Research Foundation), on 16th December 2015, for all the six projects granted as a result of the Joint Singapore-UK Research in Cyber Security call.