Research · cybersecurity · information systems · human factors
Secure digital systems must work in the hands of real users.
I study the relationship between technology, security risk and human decision-making. My aim is to understand real user behaviour and help design digital systems that are clear, usable and responsible.
- Core question
- How to connect security, usability and human behaviour
- Methodological basis
- Empirical analysis · evaluation · modelling
- Application settings
- Organisations · public administration · digital services
Research premise
Technology does not operate in a vacuum
A security problem cannot be explained by technology alone. The person, the situation and the organisational environment also matter.
Users often know basic security recommendations, yet do not follow them in a specific situation. I therefore examine the gap between stated knowledge, actual behaviour and the conditions that shape a decision.
A technically effective measure can fail in practice when it is unclear, difficult to use or misaligned with the user’s goal. I therefore connect security with HCI, usability evaluation and risk communication.
I apply the same perspective to information systems and AI-supported solutions. Alongside performance, I examine explainability, trustworthiness, organisational value and meaningful human oversight.
Research agenda
Main research directions
These strands share a common objective: to explain how technical, behavioural and contextual factors jointly determine the quality and security of a digital system.
Security decisions and the knowledge–behaviour gap
I investigate why actual behaviour departs from users’ knowledge and stated intentions. This includes decisions on public Wi-Fi networks, the use of protective mechanisms, authentication and digital risk perception.
Usable security and risk communication
I assess whether users understand security controls, can apply them correctly and see their purpose. The aim is to find a balance between protection, cognitive load and a smooth interaction with the system.
Explainable risk modelling and adaptive protection
I design and evaluate models that combine technical vulnerability, user behaviour and situational context. The emphasis is on interpretable results and proportionate responses rather than opaque automated decisions.
Information systems and AI support evaluation
I examine the quality, usability and value of information systems and digital services. In AI-supported expert and knowledge-based systems, I also study trust, communication adaptation, human oversight and the ability to contest decisions.
Methodological approach
From observation to a testable conclusion
I choose methods to fit the research question. The common principles are a transparent process, proportionate interpretation and checks that findings hold beyond a single analytical scenario.
Identify the real problem
Research questions start with specific user behaviour, a decision-making situation or an organisational need.
Gather several forms of evidence
I use surveys, experiments, usability evaluation and the analysis of operational and behavioural data.
Explain relationships and risk
I compare statistical and decision models with alternatives and assess their stability, limitations and interpretability.
Return the result to practice
Conclusions must reflect the strength of the evidence and support the design, evaluation or governance of digital solutions.
Evidence and methods
Combining data with context
I connect quantitative results with an understanding of the setting in which the data were produced. Statistical significance alone is insufficient when the practical meaning and limitations of a finding cannot be explained.
- surveys and behavioural data,
- field and controlled experiments,
- usability and user experience evaluation,
- statistical modelling and sensitivity analysis.
Practical relevance
Research that supports decisions
The findings inform the design of security controls, digital services and AI-supported systems. They are relevant to public administration, organisations, education and user interface development.
Outputs and collaboration
From a research question to publication and practice
Publications and projects present the specific results. Please contact me to discuss research collaboration, a joint project or an expert consultation.