If you have been following my blog, then you know I am working on my dissertation. Today, I received approval to proceed with my research into security automation in the finance sector. Now, I need participants for the study. The purpose of the study is to understand how security automation and adaptive cyber defense methods have been applied or can be applied within the financial sector of the United States.
Requirements: Participants must have two years of cybersecurity experience in the financial services industry.
Your Investment: If you volunteer to participate in this study, you will be asked to participate in a face-to-face interview session that will last approximately 45 to 60 minutes. I will travel to your location to conduct the interview.
Benefits of Participation: There may not be direct benefits to you as a participant in this study. However, I hope the financial services industry will be able to apply the lessons learned from this research to increase the security posture of individual institutions and the industry.
When: After you agree to participate, I will contact you to schedule the interview at your convenience. I would like to conduct the interviews between February and April 2019.
Conceptual Basis of the Study: The use of security automation and adaptive cyber defenses to combat cybercrime is an area of increasing research interest. Cyber attackers enjoy a significant advantage over the defenders in cyber conflict. The attackers’ advantage stems from multiple issues including the asymmetry of cyber conflict, the increased sophistication of cyber attacks, the speed and number of attacks, and a global shortage of cybersecurity talent. Current human-centered cyber defense practices cannot keep pace with the threats targeting financial organizations. An integrated approach involving security orchestration, automated response, information sharing, and advanced defense methods can reduce the competitive gap between attackers and defenders.
Risks of Participation: There are risks involved in all research studies. This study is estimated to involve minimal risk. An example of the risk includes feeling uncomfortable answering questions regarding your experiences, security activities, or organization. You are free to decline to answer any question(s) you feel discomforting to you at any time during the interview session.