Research
The Ransomware Readiness Index leverages the existing SCRAM platform to securely collect and
aggregate public and private sector ransomware-specific information for 10 security control areas and associated financial losses.
2024
-
Mind the Gap: Securely modeling cyber risk based on security deviations from a peer group
SiRAcon’24 - Forthcoming
Paper (ArXiv), Conference (SiRAcon’24)
In Process
- Secure automated collection of industry security posture.
- Building secure computations to avoid leakage in results. Advancing SCRAM Privacy Centric Approaches in Cyber Risk measurement.
2023
-
Municipal cyber risk modeling using cryptographic computing to inform cyber policymaking
Cybersecurity Law and Policy Conference 2023
Paper (ArXiv) -
A Cloud Cybersecurity Benchmarking Framework - MIT/IBM CloudSec 16
Damien Lewke (Thesis) - Emerging privacy-enhancing technologies
(OECD iLibrary)
2022
-
Beyond Cryptography: Deniable Privacy for Secure Data Aggregation
Eric Pence (Thesis) -
Continuous Measured Improvement: A New Approach to Meeting the Municipal Cybersecurity Challenge
Avital Baral (Thesis) -
Overlooking the Little Guy: An Analysis of Cyber Incidents and Individual Harms
Rebecca Spiewak (Thesis)
2021
-
Ransomware Readiness Index: A Proposal to Measure Current Preparedness and Progress Over Time
MIT IPRI Working Paper (Working paper)
2020
-
Paper: SCRAM: A Platform for Securely Measuring Cyber Risk
Harvard Data Science Review (HDSR)
