Christopher Williams
Current Organizations / Institutes
The organizations/institutes from the scholar's latest article
Research Subjects
Christopher Williams has a total of 7 co-authors. Here are the top co-authors by number of shared publications:
- Shamal Faily
Bournemouth University
2 shared publications - Andrew M’mAnga
Bournemouth University
1 shared publication - Daisuke Miyamoto
Nara Inst Sci & Technol, Ikoma, Japan
1 shared publication - Duncan Ki-Aries
School of Computing and Engineering, MST Department, Bournemouth University, Poole, U.K.
1 shared publication - Huseyin Dogan
Bournemouth University, Poole, United Kingdom
1 shared publication - John McAlaney
Bournemouth University
1 shared publication
Latest Publications
- Open Access
- 21 March 2022
- Published by Elsevier in Computers & Security
- Vol. 117, 102690
Assessing system of systems information security risk with OASoSIS
- 21 March 2022
- Published by Elsevier in Computers & Security
- Vol. 117, 102690
Open AccessAssessing system of systems information security risk with OASoSIS
- 11 November 2019
- Published by Emerald Publishing in Information & Computer Security
- Vol. 27 (5) , 636-646
A normative decision-making model for cyber security
The purpose of this paper is to investigate security decision-making during risk and uncertain conditions and to propose a normative model capable of tracing the decision rationale. The proposed risk rationalisation model is grounded in literature and studies on security analysts’ activities. The model design was inspired by established awareness models including the situation awareness and observe–orient–decide–act (OODA). Model validation was conducted using cognitive walkthroughs with security analysts. The results indicate that the model may adequately be used to elicit the rationale or provide traceability for security decision-making. The results also illustrate how the model may be applied to facilitate design for security decision makers. The proof of concept is based on a hypothetical risk scenario. Further studies could investigate the model’s application in actual scenarios. The paper proposes a novel approach to tracing the rationale behind security decision-making during risk and uncertain conditions. The research also illustrates techniques for adapting decision-making models to inform system design.
- 11 November 2019
- Published by Emerald Publishing in Information & Computer Security
- Vol. 27 (5) , 636-646
A normative decision-making model for cyber security
The purpose of this paper is to investigate security decision-making during risk and uncertain conditions and to propose a normative model capable of tracing the decision rationale. The proposed risk rationalisation model is grounded in literature and studies on security analysts’ activities. The model design was inspired by established awareness models including the situation awareness and observe–orient–decide–act (OODA). Model validation was conducted using cognitive walkthroughs with security analysts. The results indicate that the model may adequately be used to elicit the rationale or provide traceability for security decision-making. The results also illustrate how the model may be applied to facilitate design for security decision makers. The proof of concept is based on a hypothetical risk scenario. Further studies could investigate the model’s application in actual scenarios. The paper proposes a novel approach to tracing the rationale behind security decision-making during risk and uncertain conditions. The research also illustrates techniques for adapting decision-making models to inform system design.