About
I study how people make cybersecurity decisions under real-world constraints: limited attention, incomplete knowledge, time pressure, and competing goals. My work examines how interfaces and tools shape what people notice, how they interpret security-relevant information, and what actions they are able to take.
My research draws on mental models, bounded rationality, and human factors. I use empirical user studies, interface evaluation, and statistical analysis to design and evaluate security support for end-users and developers.
I also teach a postgraduate course on Usable Security and Privacy, where students engage with foundational research, discuss current issues, and design their own usable-security studies.
Featured Publications
Full list on Google Scholar- Language as Lure: A Naturalistic Study on Pasifika Phishing Susceptibility
- USENIX Symposium on Usable Privacy and Security, USENIX, 2025
- PDFSlides
- Site Inspector: Improving Browser Communication of Website Security Information
- ACM Transactions on Privacy and Security, ACM, 2025
- PDFFirefox Add-onGitHub
- What is Beautiful is Secure
- ACM Transactions on Privacy and Security, ACM, 2022
- Out of Sight, Out of Mind: UI Design and the Inhibition of Mental Models of Security
- New Security Paradigms Workshop, ACM, 2020