Research Methods for Cyber Security

Foreword

Deborah A. Frincke

The security field—whether one calls it security, cybersecurity, information assurance, information security, or something else—is delightfully frustrating, being an field that both moves at a glacial pace, and literally transforms itself overnight. There are so many challenges! Connect two previously disparate systems, and very often, system security properties (and vulnerabilities) will be entirely different. Change the user community from, say, a highly regulated government agency to a family home, and the methodologies we accept in the name of security become unacceptable. One does not fire the family 5-year old because she writes down a password! As scientists, how do we measure these differences?

There is ...