Research

Research Interests

Research interests: usable security; human-computer interaction; eye tracking; web technologies; affective feedback; open-source intelligence, secure software development.

Research Supervision

• Tolga Ünlü – Attack Awareness Within Web Applications (PhD Student)

Publications

2021

• Lallie, H. S., Shepherd, L. A., Nurse, J. R. C., Erola, A., Epiphaniou, G., Maple, C., Bellekens, X. (2021). Cyber Security in the Age of COVID-19: A Timeline and Analysis of Cyber-Crime and Cyber-Attacks during the Pandemic. Computers & Security (Accepted/In Press). Journal
• Collier, B., Horgan, S., Jones, R., Shepherd, L. (2021). Re-territorialising the Policing of Cybercrime in the Post-COVID-19 Era: Towards a New Vision of Local Democratic Cyber Policing. Journal of Criminal Psychology (Accepted/In Press). Journal

2020

• O’Hare, J., Shepherd, L. A. (2020). Proposal of a Novel Bug Bounty Implementation Using Gamification. arXiv:2009.10158. arXiv Preprint
• Shepherd, L. A., De Paoli, S., Conacher, J. (2020). Human-Computer Interaction Considerations When Developing Cyber Ranges. International Journal of Information Security and Cybercrime 9(2), pp.28-32. Journal
• Lallie, H. S., Shepherd, L. A., Nurse, J. R. C., Erola, A., Epiphaniou, G., Maple, C., Bellekens, X. (2020). Cyber Security in the Age of COVID-19: A Timeline and Analysis of Cyber-Crime and Cyber-Attacks during the Pandemic. arXiv:2006.11929. arXiv Preprint
• Collier, B., Horgan, S., Jones, R., Shepherd, L. (2020). Local policing must adapt to cybercrime in the post-pandemic era. COVID-19 Perspectives, The University of Edinburgh. Blog Article
• Collier, B., Horgan, S., Jones, R., Shepherd, L. (2020). The Implications of the COVID-19 Pandemic for Cybercrime Policing in Scotland: a Rapid Review of the Evidence and Future Considerations. Research Evidence in Policing: Pandemics; No. 1, Scottish Institute for Policing Research. Report
• Ünlü, T., Shepherd, L. A., Coull, N. J. & McLean, C. (2020). A Taxonomy of Approaches for Integrating Attack Awareness in Applications. 2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security), Dublin, Ireland. Conference

2019

• Scholefield, S., Shepherd, L.A. (2019). Gamification Techniques for Raising Cyber Security Awareness. In: Moallem A. (eds) HCI for Cybersecurity, Privacy and Trust. HCII 2019. Lecture Notes in Computer Science, vol 11594. Springer, Cham. Conference
• Shepherd, L. (2019). Promoting Cyber Security Awareness via Gamification. Abstract from the Workshop on Serious Games for Cyber Security. Edinburgh, UK. Workshop Abstract
• Hall, C.C., Shepherd, L.A., Coull, N. (2019). BlackWatch: Increasing Attack Awareness Within Web Applications. Future Internet. 11(2):44, MDPI. Journal
• Shepherd L., Renaud, K. (2019). How to Design Browser Security and Privacy Alerts (Extended Talk Abstract). In: Johns, M., Nikiforakis, N., Volkamer, M., Wilander, J., (2019), Dagstuhl Reports- Web Application Security (Dagstuhl Seminar 18321). Dagstuhl Reports, 8(8), pp.10, Schloss Dagstuhl–Leibniz-Zentrum fuer Informatik. Dagstuhl, Germany. Meeting Abstract

2018

• Rapley, A., Bellekens, X., Shepherd, L.A., McLean, C. (2018). Mayall: A Framework for Desktop JavaScript Auditing and Post-Exploitation Analysis. Informatics. 5(4):46, MDPI. Journal
• Renaud, K., Shepherd, L.A. (2018). How to Make Privacy Policies both GDPR-Compliant and Usable. International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA). Glasgow, 2018. Conference
• Shepherd, L.A., Renaud, K. (2018). How to Design Browser Security and Privacy Alerts. Proceedings of AISB 2018 Symposium, April 2018, (Symposium on Digital Behaviour Intervention for Cyber Security). Liverpool, UK. Conference
• Renaud, K., Shepherd, L. (2018). GDPR: its time has come. Network Security, 2018(2), pp.20-20. Journal

2017

• Shepherd L.A., Archibald J., Ferguson R.I. (2017). Assessing the Impact of Affective Feedback on End-User Security Awareness. In: Tryfonas, T. (eds) Human Aspects of Information Security, Privacy, and Trust. HAS 2017. Lecture Notes in Computer Science, vol 10292, pp. 143–159. Springer International Publishing. Conference
• Shepherd L.A., Archibald J. (2017). Security Awareness and Affective Feedback: Categorical Behaviour vs. Reported Behaviour. International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA). London, 2017. Conference

2014

• Shepherd L.A., Archibald J., Ferguson R.I. (2014). Reducing Risky Security Behaviours: Utilising Affective Feedback to Educate Users. Future Internet. 6(4):760-772, MDPI. Journal
• Shepherd, L.A., Archibald, J., and Ferguson, R.I. (2014). Reducing Risky Security Behaviours: Utilising Affective Feedback to Educate Users. Proceedings of Cyberforensics 2014, University of Strathclyde, Glasgow, pp7-14, 2014. Conference

2013

• Shepherd L.A., Archibald J., Ferguson R.I. (2013). Perception of Risky Security Behaviour by Users: Survey of Current Approaches. In: Marinos L., Askoxylakis I. (eds) Human Aspects of Information Security, Privacy, and Trust. HAS 2013. Lecture Notes in Computer Science, vol 8030. Springer, Berlin, Heidelberg. Conference

Funding

Selected Funding

• 2019- European Commission – Horizon 2020 FORESIGHT (Co-Principle Investigator Abertay University).
• 2019- Law Enforcement Consultancy Work (Principle Investigator).
• 2018- Recipient of a Scottish Informatics and Computer Science Alliance (SICSA) Cyber Nexus Research Exchange award (Principle Investigator).
• 2018- Awarded a Carnegie Trust Research Incentive Grant for a project entitled “Exploring the impact of embodied agents on phishing awareness” (Principle Investigator).
• 2014- Collaborative Innovation Funding, Informatics Ventures. Secured preliminary funding to perform a market study investigating the requirements needed for a piece of Open Source Intelligence software (Principle Investigator).
• 2012- Recipient of a competitive Scottish Informatics and Computer Science Alliance (SICSA) prize studentship award of 3.5 years to support PhD work (2012-2016).