Publications

2025

• Shepherd, L. A., Austin, H. J., Kavanagh, W. & Merchant, N. 2025. GLAM Sector XR Accessibility Toolkit Report. Royal National Institute of Blind People (RNIB). (In press). Report
• Shepherd, L. A., Austin, H. J., Kavanagh, W. & Merchant, N. 2025. Games Sector XR Accessibility Toolkit Report. Royal National Institute of Blind People (RNIB). (In press). Report
• Martinez, M., Shepherd, L.A., 2025. Optimising tab management with machine learning to improve user experience. In: HCI International 2025 Posters: 24th International Conference on Human-Computer Interaction, HCII 2025, Springer. (Accepted/In Press) Conference
• Grabinger, L., Al Madi, N., Bednarik, R., Busjahn, T., Engl, F., Ezer, T., Gruber, H., Hauser, F., Maletic, J., Obaidellah, U., Park, K.-I., Sharafi, Z., Sharif, B., Shepherd, L. A. & Mottok, J. (2025). A Cookbook for Eye Tracking in Software Engineering. Submitted to : European Conference of Software Engineering Education (ECSEE 2025). Conference

2024

• Lea, O., Shepherd, L.A. and Szymkowiak, A., 2024, November. HeartGuard VR: Immersive Romance Scam Education. In International Conference on Games and Learning Alliance (pp. 201-211). Cham: Springer Nature Switzerland. Conference
• Cotton, T. and Shepherd, L.A., 2024, July. Practising safe sex (t): developing a serious game to tackle technology-facilitated sexual violence. In 15th International Conference on Applied Human Factors and Ergonomics (pp. 176-186). AHFE International. Conference
• Houf, L., Szymkowiak, A. and Shepherd, L.A., (2024). Promotion of sustainable products: can sustainability labels promote user selection of environmentally friendly products?. Sustainability, 16(13), p.5390. Journal
• Lea, O., Shepherd, L.A. and Szymkowiak, A., 2024. HeartGuard VR. Software output – serious game. https://lynsay.itch.io/heartguardvr. Software
• Kydd, M., Shepherd, L., Johnson, G. & Szymkowiak, A. (2024). Love bytes: improving romance fraud prevention. CREST Security Review, Winter 2024, 18, p. 28-29. Magazine article

2023

• Bilz, A., Shepherd, L.A. and Johnson, G.I., 2023. Tainted Love: A Systematic Review of Online Romance Fraud. arXiv preprint arXiv:2303.00070. Preprint
• Bilz, A., Shepherd, L.A. and Johnson, G.I., 2023. Broken hearts. Software output – serious game. https://lynsay.itch.io/broken-hearts. Software
• Kydd, M., Shepherd, L. A., Szymkowiak, A., & Johnson, G. I. (2023). Straight to the heart of the matter: towards effective means of combatting romance fraud. Poster session presented at Third International Conference on Behavioural and Social Sciences in Security, Bath, United Kingdom. Conference
• Kydd, M. and Shepherd, L.A., 2023. Deep Breath: A Machine Learning Browser Extension to Tackle Online Misinformation. arXiv preprint arXiv:2301.03301. Preprint
• Bilz, A., Shepherd, L. A., & Johnson, G. I. (2023). Tainted love: a systematic literature review of online romance scam research. Interacting with Computers, iwad048. Journal
• Kydd, M., Shepherd, L. A., Szymkowiak, A., & Johnson, G. I. (2023). Love at First Sleight: A Review of Scammer Techniques in Online Romance Fraud. In The International Conference on Cybersecurity, Situational Awareness and Social Media (pp. 327-341). Singapore: Springer Nature Singapore. Conference
• Shepherd, L. A., & Szymkowiak, A. (2023). Investigating phishing awareness using virtual agents and eye movements. In Proceedings of the 2023 Symposium on Eye Tracking Research and Applications (pp. 1-2). Conference

2022

• Sahin, M., Ünlü, T., Hébert, C., Shepherd, L.A., Coull, N. and McLean, C., 2022, May. Measuring developers’ web security awareness from attack and defense perspectives. In 2022 IEEE Security and Privacy Workshops (SPW) (pp. 31-43). IEEE. Conference
• O’Hare, J. and Shepherd, L.A., 2022, June. Developing a gamified peer-reviewed bug bounty programme. In HCI International 2022 Posters: 24th International Conference on Human-Computer Interaction, HCII 2022, Virtual Event, June 26–July 1, 2022, Proceedings, Part IV (pp. 514-522). Cham: Springer International Publishing. Conference
• Shepherd, L.A., 2022, November. We can work it out: increasing accessibility in the video games industry. In Accessible Gaming Symposium 2022. Blog
• Shepherd, L.A., Michalakos, C., Griffiths, R., Lynagh, M., Findleton, C., Hughes, J., Ledger, M., Scott, B., Dunnion, M., Threlfall, E. and Black, A., 2022. Gone phishing. Software output – serious game. https://lynsay.itch.io/gone-phishing. Software

2021

• Boyle, P., Shepherd, L. A. (2021). MailTrout: A Machine Learning Browser Extension for Detecting Phishing Emails. British HCI Conference 2021: Post-Pandemic HCI – Living Digitally. (Accepted/In Press). Conference
• Ünlü, T., Shepherd, L. A., Coull, N. J., McLean, C. (2021). Angry Birding: Evaluating Application Exceptions as Attack Canaries. 6th IEEE European Symposium on Security and Privacy (EuroS&P) 2021. Conference
• Lallie, H. S., Shepherd, L. A., Nurse, J. R. C., Erola, A., Epiphaniou, G., Maple, C., Bellekens, X. (2021). Cyber Security in the Age of COVID-19: A Timeline and Analysis of Cyber-Crime and Cyber-Attacks during the Pandemic. Computers & Security (Accepted/In Press). Journal
• Collier, B., Horgan, S., Jones, R., Shepherd, L. (2021). Re-territorialising the Policing of Cybercrime in the Post-COVID-19 Era: Towards a New Vision of Local Democratic Cyber Policing. Journal of Criminal Psychology (Accepted/In Press). Journal

2020

• O’Hare, J., Shepherd, L. A. (2020). Proposal of a Novel Bug Bounty Implementation Using Gamification. arXiv:2009.10158. arXiv Preprint
• Shepherd, L. A., De Paoli, S., Conacher, J. (2020). Human-Computer Interaction Considerations When Developing Cyber Ranges. International Journal of Information Security and Cybercrime 9(2), pp.28-32. Journal
• Lallie, H. S., Shepherd, L. A., Nurse, J. R. C., Erola, A., Epiphaniou, G., Maple, C., Bellekens, X. (2020). Cyber Security in the Age of COVID-19: A Timeline and Analysis of Cyber-Crime and Cyber-Attacks during the Pandemic. arXiv:2006.11929. arXiv Preprint
• Collier, B., Horgan, S., Jones, R., Shepherd, L. (2020). Local policing must adapt to cybercrime in the post-pandemic era. COVID-19 Perspectives, The University of Edinburgh. Blog Article
• Collier, B., Horgan, S., Jones, R., Shepherd, L. (2020). The Implications of the COVID-19 Pandemic for Cybercrime Policing in Scotland: a Rapid Review of the Evidence and Future Considerations. Research Evidence in Policing: Pandemics; No. 1, Scottish Institute for Policing Research. Report
• Ünlü, T., Shepherd, L. A., Coull, N. J. & McLean, C. (2020). A Taxonomy of Approaches for Integrating Attack Awareness in Applications. 2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security), Dublin, Ireland. Conference

2019

• Scholefield, S., Shepherd, L.A. (2019). Gamification Techniques for Raising Cyber Security Awareness. In: Moallem A. (eds) HCI for Cybersecurity, Privacy and Trust. HCII 2019. Lecture Notes in Computer Science, vol 11594. Springer, Cham. Conference
• Shepherd, L. (2019). Promoting Cyber Security Awareness via Gamification. Abstract from the Workshop on Serious Games for Cyber Security. Edinburgh, UK. Workshop Abstract
• Hall, C.C., Shepherd, L.A., Coull, N. (2019). BlackWatch: Increasing Attack Awareness Within Web Applications. Future Internet. 11(2):44, MDPI. Journal
• Shepherd L., Renaud, K. (2019). How to Design Browser Security and Privacy Alerts (Extended Talk Abstract). In: Johns, M., Nikiforakis, N., Volkamer, M., Wilander, J., (2019), Dagstuhl Reports- Web Application Security (Dagstuhl Seminar 18321). Dagstuhl Reports, 8(8), pp.10, Schloss Dagstuhl–Leibniz-Zentrum fuer Informatik. Dagstuhl, Germany. Meeting Abstract

2018

• Rapley, A., Bellekens, X., Shepherd, L.A., McLean, C. (2018). Mayall: A Framework for Desktop JavaScript Auditing and Post-Exploitation Analysis. Informatics. 5(4):46, MDPI. Journal
• Renaud, K., Shepherd, L.A. (2018). How to Make Privacy Policies both GDPR-Compliant and Usable. International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA). Glasgow, 2018. Conference
• Shepherd, L.A., Renaud, K. (2018). How to Design Browser Security and Privacy Alerts. Proceedings of AISB 2018 Symposium, April 2018, (Symposium on Digital Behaviour Intervention for Cyber Security). Liverpool, UK. Conference
• Renaud, K., Shepherd, L. (2018). GDPR: its time has come. Network Security, 2018(2), pp.20-20. Journal

2017

• Shepherd L.A., Archibald J., Ferguson R.I. (2017). Assessing the Impact of Affective Feedback on End-User Security Awareness. In: Tryfonas, T. (eds) Human Aspects of Information Security, Privacy, and Trust. HAS 2017. Lecture Notes in Computer Science, vol 10292, pp. 143–159. Springer International Publishing. Conference
• Shepherd L.A., Archibald J. (2017). Security Awareness and Affective Feedback: Categorical Behaviour vs. Reported Behaviour. International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA). London, 2017. Conference

2014

• Shepherd L.A., Archibald J., Ferguson R.I. (2014). Reducing Risky Security Behaviours: Utilising Affective Feedback to Educate Users. Future Internet. 6(4):760-772, MDPI. Journal
• Shepherd, L.A., Archibald, J., and Ferguson, R.I. (2014). Reducing Risky Security Behaviours: Utilising Affective Feedback to Educate Users. Proceedings of Cyberforensics 2014, University of Strathclyde, Glasgow, pp7-14, 2014. Conference

2013

• Shepherd L.A., Archibald J., Ferguson R.I. (2013). Perception of Risky Security Behaviour by Users: Survey of Current Approaches. In: Marinos L., Askoxylakis I. (eds) Human Aspects of Information Security, Privacy, and Trust. HAS 2013. Lecture Notes in Computer Science, vol 8030. Springer, Berlin, Heidelberg. Conference