Dr Lynsay Shepherd

Lecturer in Usable Security · lynsay.shepherd@abertay.ac.uk

Dr Lynsay A. Shepherd is a lecturer in Usable Security at Abertay University, Dundee, and works within the Division of Cyber Security, in the School of Design and Informatics. Lynsay studied at Abertay University, Dundee, and holds a PhD in Usable Security, an MSc in Internet Computing (Distinction), and a BSc (Hons) in Computing. In addition to this, Lynsay holds a Postgraduate Certificate in Higher Education Teaching (with Distinction) and is a Fellow of the Higher Education Academy (FHEA).

Despite the availability of security tools, devices are still vulnerable to compromise via the risky security behaviour of end-users. Risky behaviour is not necessarily obvious to all end-users, and can be difficult to recognise. Lynsay is interested in the human aspects of cyber security, investigating how to effectively communicate security information to end-users.

Lynsay supervises a variety of projects at both undergraduate (BSc), and postgraduate levels (MSc, PhD). If you are interested in any of the aforementioned topics, please get in contact with her.

Online links: Abertay Profile, ResearchGate, Google Scholar, dblp, GitHub, ORCID iD


Research

Research Interests

Despite the availability of security tools, devices are still vulnerable to compromise via the risky security behaviour of end-users. Risky behaviour is not necessarily obvious to all end-users, and can be difficult to recognise. Lynsay is interested in the human aspects of cyber security, investigating how to effectively communicate security information to average end-users.

Lynsay’s PhD research explored the fields of affective computing and usable security, and produced a thesis entitled “Enhancing security risk awareness in end-users via affective feedback”. The project investigated the use of a browser extension to monitor and automatically detect risky security behaviour. On detection of such behaviour, affective feedback was delivered to the end-user. The work analysed the impact of the feedback in relation to end-user security awareness.

Research interests: usable security; human-computer interaction; eye tracking; security awareness; affective feedback; open-source intelligence, secure software development.

Lynsay supervises a variety of projects at both undergraduate (BSc), and postgraduate levels (MSc, PhD). If you are interested in any of the aforementioned topics, please get in contact with her.

Funding

Selected Funding
  • 2019- European Commission – Horizon 2020 FORESIGHT (Co-Principle Investigator Abertay University).
  • 2019- Law Enforcement Consultancy Work (Principle Investigator).
  • 2018- Recipient of a Scottish Informatics and Computer Science Alliance (SICSA) Cyber Nexus Research Exchange award (Principle Investigator).
  • 2018- Awarded a Carnegie Trust Research Incentive Grant for a project entitled “Exploring the impact of embodied agents on phishing awareness” (Principle Investigator).
  • 2014- Collaborative Innovation Funding, Informatics Ventures. Secured preliminary funding to perform a market study investigating the requirements needed for a piece of Open Source Intelligence software (Principle Investigator).
  • 2012- Recipient of a competitive Scottish Informatics and Computer Science Alliance (SICSA) prize studentship award of 3.5 years to support PhD work (2012-2016). Funding equated to approximately £18000 per year (total: £63000).

Research Supervision

PhD Students

Chairing and Reviewer Roles

Chairing
  • Conference chair, Cyber Science 2018 conference, Glasgow, UK, 2018
  • Local publicity chair, Cyber Science 2018 conference, Glasgow, UK, 2018
  • Session chair, Human Behaviour in Security and Privacy, HCII 2017, Vancouver, Canada
Programme Committee/Reviewer/Judging Panel Roles
  • Grant Reviewer – IEEE Access, 2019 – present
  • Grant Reviewer – SICSA Cyber Nexus, 2019 – present
  • Grant Reviewer – Carnegie Trust for the Universities of Scotland, Vacation Scholarship scheme, 2019 – present
  • Reviewer – Expert Systems With Applications (Elsevier), 2018 – present
  • Programme Committee (Reviewer) – International Conference on Cyber-Technologies and Cyber-Systems (IARIA CYBER), 2018
  • Judging Panel, Aberdeenshire GamesCon 2018, Robert Gordon University, Aberdeen, Scotland (June 2018)
  • Reviewer – Journal of Information Security and Applications (Elsevier), 2018 – present
  • Reviewer – Information Technology and People journal (Emerald Publishing), 2017 – present
  • Programme Committee (Reviewer) – International Conference On Cyber Situational Awareness (IEEE Cyber SA), 2017 – present
  • Programme Committee (Reviewer) – International Conference On Cyber Security and Protection (IEEE Cyber Security) – present
  • Judging Panel, Poster Competition for Women in Cyber Security, Napier University, Edinburgh, Scotland (May 2017)

Knowledge Exchange

  • International Health Battle and iAge Project (Interreg Europe Project)- Lynsay participated as a team security expert in the International Health Battle and iAge Meetings, Hanze University Groningen, Netherlands, November 2013. It involved working on an eHealth case with a multidisciplinary team, forming a solution and presenting a pitch.

Publications

Outputs

2019
2018
2017
2014
2013

Theses

  • Shepherd, L. A. 2016. Enhancing security risk awareness in end-users via affective feedback. PhD, Abertay University.
  • Shepherd, L. A. 2011. Determining Identity on Mobile Phones Using Keystroke Analysis. MSc, Abertay University.

Teaching

2019/20 Academic Session

  • CMP204 Dynamic Web Development (module leader)
  • CMP206 Programming For The User (co-deliverer)
  • CMP308 Professional Project Planning and Prototyping (co-deliverer, computing programme specialist)
  • CMP311 Professional Project Development and Delivery (co-deliverer, computing programme specialist)
  • CMP416 Digital Forensics 2 (module leader, mobile forensics specialist)
  • ELE005 Defense Against the Dark Arts (co-deliverer)

Previous Modules Taught

  • CMP319 Ethical Hacking 2, CMP401 Honours Project Scoping and Proposal, CMP412 Mobile Forensics, CMP414 Web Futures.

Previous Modules Taught 2009 - 2015

Modules taught as a co-deliverer
  • Data Design and Organisation, Information Architecture, Object Oriented Programming 2 – Java, Practical Session 2, Database and Internet Application Design.
Modules taught as a part-time/visiting Lecturer
  • Computer Hardware Architecture and Operating Systems, Advanced Web Scripting, Web Standards, Professional Practice, Database Fundamentals, XML and the Mobile Internet.

Talks

  • SIPR International Policing Conference 2019- Digital Policing: Ethical Challenges Regarding the Role of Technology in Policing (talk title: “Improving Security Awareness Through Gamification Techniques”, University of Edinburgh, Scotland (December 2019)
  • NERD.nrw Summer School on Human-Centered System Security (speaking on Human-Centered Cyber Security and the Role of Gamification), RWTH Aachen University, Aachen, Germany, (September 2019)
  • Invited speaker- Promoting Cyber Security Awareness via Gamification (May 2019), Workshop on Serious Games for Cyber Security. Edinburgh, UK.
  • Invited speaker- Meet the Expert talk (February 2019), Skills Development Scotland (SDS) – Cyber Skills Programme
  • Invited speaker at the Cyber Security Christmas Lectures in 2018 (Dundee). Gave a presentation entitled “How the Black Hat (Hackers) Stole Christmas”, featuring a demonstration of an IoT child’s toy, and a discussion on open-source intelligence.
  • Invited keynote speaker at the Aberdeenshire GamesCon 2018 Final (Robert Gordon University, Aberdeen). Gave a keynote speech entitled “From Computer Geek to Cyber Security Researcher” discussing the journey from school to PhD.
  • Invited speaker at the Cyber Security Christmas Lectures in 2017 (Aberdeen and Dundee). Gave a presentation entitled “A Fridge Full Of Spam” and a demonstration of an IoT child’s toy.
  • Invited speaker- Social Market Foundation event, SNP Conference, Digital security: how do we keep our money – and ourselves – safe online? Glasgow, Scotland (October 2017)
  • Invited speaker at the SICSA Cyber Security Christmas Lectures in 2016 (Inverness and Dundee). Gave a presentation entitled “A Fridge Full Of Spam”.
  • Speaker at the SICSA Cyber Security Christmas Lectures from 2012-2014. Delivered talks to school pupils about social engineering and the danger of geolocation data shared in tweets.

Events

Upcoming events and conferences
  • TBC!
2020
  • SICSA Human Computer Interaction All Hands meeting, University of Dundee, Scotland (January 2020)
    Attendee
2019
  • SIPR International Policing Conference 2019- Digital Policing: Ethical Challenges Regarding the Role of Technology in Policing (talk title: “Improving Security Awareness Through Gamification Techniques”, University of Edinburgh, Edinburgh, Scotland (December 2019)
    Invited Speaker
  • NERD.nrw Summer School on Human-Centered System Security (speaking on Human-Centered Cyber Security and the Role of Gamification), RWTH Aachen University, Aachen, Germany (September 2019)
    Invited Speaker
  • HCI International 2019, Walt Disney World Swan and Dolphin Resort, Orlando, Florida (July 2019)
    Paper
  • SICSA Cyber Nexus Workshop on Serious Games for Cyber Security, Heriot-Watt University, Edinburgh (May 2019)
    Invited Speaker
  • SICSA Cyber Nexus Research Exchange, Regensburg, Germany (April 2019)
    Principle Investigator
  • Securi-Tay 2019, Abertay University, Dundee, Scotland (March 2019)
    Attendee
  • Meet the Expert talk, Skills Development Scotland (SDS) – Cyber Skills Programme (February 2019)
    Speaker
2018
  • Cyber Security Christmas Lecture, Abertay University, Dundee, Scotland (December 2018) – “How the Black Hat (Hackers) Stole Christmas”
    Speaker
  • SICSA Human Computer Interaction All Hands meeting, University of St Andrews, Scotland (December 2018)
    Attendee
  • DEMOfest 2018, Dynamic Earth, Edinburgh, Scotland (November 2018)
    Attendee
  • Dagstuhl Seminar 18321 Web Application Security, Schloss Dagstuhl – Leibniz-Zentrum für Informatik GmbH, Wadern, Germany (August 2018) – Invited guest and presenter
    Participant Invited Speaker
  • Cherwell, Dundee One Launch Event Dundee, Scotland (July 2018)
    Invited Panellist
  • Aberdeenshire GamesCon 2018, Robert Gordon’s University, Aberdeen, Scotland (June 2018) – Keynote speaker, talk title “From Computer Geek to Cyber Security Researcher”
    Keynote Speaker Judging Panel
  • Cyber Science 2018 conference, Glasgow, UK (June 2018) – Conference chair, local publicity chair
    Conference Chair
  • AISB 2018 – Symposium on Digital Behaviour Intervention for Cyber Security , University of Liverpool, UK (April 2018)
    Paper
2017
  • Cyber Security Christmas Lecture, Abertay University, Dundee, Scotland (December 2017) – “A Fridge Full Of Spam”
    Speaker
  • Cyber Security Christmas Lecture, Robert Gordon’s University, Aberdeen, Scotland (December 2017) – “A Fridge Full Of Spam”
    Speaker
  • Social Market Foundation event, SNP Conference, Digital security: how do we keep our money – and ourselves – safe online? Glasgow, Scotland (October 2017)
    Speaker
  • DEMOfest 2017, Dynamic Earth, Edinburgh, Scotland (October 2017)
    Attendee
  • HCI International 2017, Vancouver Convention Centre, Vancouver, Canada (July 2017)
    Paper Session Chair
  • International Conference on Cyber Situational Awareness, Data Analytics and Assessment (Cyber SA 2017), Connaught Rooms, London, UK (June 2017)
    Paper
  • Poster Competition for Women in Cyber Security, Napier University, Edinburgh, Scotland (May 2017) – judging panel
    Judging Panel
  • Abertay Digital Graduate Show, Abertay University, Dundee, Scotland (May 2017) – “A Fridge Full Of Spam”
    Speaker
  • EPSRC ICT Early Careers workshop, Cardiff, Wales (March 2017)
    Participant
  • Securi-Tay VI, Abertay University, Dundee, Scotland (February 2017)
    Attendee
2016
  • SICSA Cyber Security Christmas Lecture, Abertay University, Dundee, Scotland (December 2016) – “A Fridge Full Of Spam”
    Speaker
  • SICSA Cyber Security Christmas Lecture, University of the Highlands and Islands, Inverness, Scotland (December 2016) – “A Fridge Full Of Spam”
    Speaker
  • DEMOfest 2016, University of Strathclyde, Glasgow, Scotland (November 2016)
    Attendee
  • Securi-Tay V, Abertay University, Dundee, Scotland (February 2016)
    Attendee
2015
  • The Scientific Life Of Ada Lovelace (talk by Prof. Ursula Martin), Abertay University, Dundee, Scotland (December 2015)
    Poster
  • The Codebreakers – Enigma, Bletchley Park & the Battle of the Atlantic (talk by Dr Mark Baldwin), Abertay University, Dundee, Scotland (September 2015)
    Attendee
  • Securi-Tay IV, Abertay University, Dundee, Scotland (February 2015)
    Attendee
2014
  • SICSA Cyber Security Christmas Lecture, Inverness College UHI, Inverness, Scotland (December 2014) – Geolocation demo
    Speaker
  • SICSA Cyber Security Christmas Lecture, Abertay University, Dundee, Scotland (December 2014) – Geolocation demo
    Speaker
  • Research Students Conference, Abertay University, Dundee, Scotland (October 2014)
    Attendee
  • Cyberforensics 2014, University of Strathclyde, Glasgow, Scotland (June 2014)
    Paper
  • Securi-Tay3, Abertay University, Dundee, Scotland (January 2014)
    Attendee
2013
  • SICSA Cyber Security Christmas Lecture, Robert Gordon’s University, Aberdeen, Scotland (December 2013)
    Speaker
  • SICSA Cyber Security Christmas Lecture, Abertay University, Dundee, Scotland (December 2013) – Geolocation demo
    Speaker
  • International Health Battle and iAge Meetings, Hanze University Groningen, Groningen, Netherlands (November 2013)
    Participant
  • Research Students Conference, Abertay University, Dundee, Scotland (October 2013)
    Attendee
  • HCI International 2013, The Mirage, Las Vegas, USA (July 2013)
    Paper
  • SICSA PhD Conference, University of Stirling, Scotland (June 2013)
    Poster
  • SICSA 4th Cyber Security Meet-up, Abertay University, Dundee, Scotland (June 2013)
    Attendee
  • “Women in Security: protecting ourselves, protecting our world” event, Abertay University, Dundee, Scotland (March 2013) – geolocation demo
    Speaker
  • SICSA 3rd Cyber Security Meet-up, University of Glasgow, Scotland (February 2013) – winner of the best poster prize
    Poster
  • School Cyber Security Lecture, St Paul’s RC Academy, Dundee, Scotland (January 2013)
    Speaker
2012
  • SICSA Cyber Security Christmas Lecture, Napier University, Edinburgh, Scotland (December 2012)
    Speaker
  • SICSA PhD Induction, University of Edinburgh, Scotland (November 2012)
    Attendee
  • SICSA 2nd Cyber Security Meet-up, University of Aberdeen, Scotland (October 2012)
    Attendee
  • Research Students Conference, Abertay University, Dundee, Scotland (October 2012)
    Attendee

Outreach & Press

2019
  • Ostbayerische Technische Hochschule Regensburg, 14/06/19- Usable Security Researchers aus Dundee zu Gast in Regensburg. (June 2019). View article
2018
  • STV News Dundee, 6pm, 13/07/18- The arrival of an American software company in Dundee is being hailed as a significant boost to its reputation in the sector. (July 2018). View video
  • Evening Telegraph- American software firm opens research centre at Dundee Waterfront. (July 2018). View article
  • Aberdeenshire Council- Kids create winning software solutions to help themselves flourish in a digital world. (June 2018). View article
  • Scottish Business News Network (SBNN)- Glasgow selected for 2020 World Congress on Computational Intelligence. (April 2018). View article
  • Association of British Professional Conference Organisers Limited (ABPCO) – Glasgow is fast becoming the go-to hub for the world’s leading electrical and electronics engineers. (April 2018). View article
  • Glasgow Convention Bureau- Glasgow is fast becoming the go-to hub for the world’s leading electrical and electronics engineers. (April 2018). View article
  • Association Meetings International- Glasgow scoops world congress on computational intelligence . (April 2018). View article
2017
  • The Courier- Pupils to be warned about impact of social media posts. (December 2017). View article
  • Evening Telegraph- Online grooming ‘is a real danger’ across Dundee and Tayside. (December 2017). View article
  • The Courier- Experts and charities urge caution as location-sharing Snap Map goes live. (June 2017). View article
  • The Courier- Explained: How do I change my Snap Map location settings?. (June 2017). View article
2016
  • Evening Telegraph- Abertay lecture will warn of fridge hacking risk. (December 2016). View article
  • The Courier- Abertay University to show how your fridge can be used for cyber spam. (December 2016). View article
  • The Courier- Cybercrime the focus of Abertay Christmas lecture series. (December 2016). View article
  • Acumin- Scottish schools given lessons in cyber security. (December 2016). View article
  • Holyrood Magazine- Scottish school pupils learn about cyber security in Christmas lectures. (December 2016). View article