I am researching security certification test and evaluation (CT&E) of existing software systems in cases where the evaluation criteria are new or have suddenly changed.
I am a doctoral student at Department of Computer Science, University of Oxford reading for a DPhil in Computer Science; my research supervisors are Dr Andrew Martin and Dr Ivan Fléchais. The topic of my research is security certification test and evaluation (CT&E) of existing systems under DIACAP and the Common Criteria at evaluation assurance levels above EAL4, specifically cross domain systems.
Information Asymmetry in Classified Cross Domain System Security Accreditation
In Computer and Electronics Security Applications Rendez−vous (CESAR) 2012. Rennes‚ France. 2012.
No. FA8750−09−C−0006. United States Air Force Research Laboratory (AFRL). Rome‚ New York. 2011.
PROCEEDINGS OF THE OXFORD UNIVERSITY COMPUTING LABORATORY STUDENT CONFERENCE 2010
Programme Committee: Sara−Jane Dunn‚ Joe Loughry‚ Ivan Lubenko (chair) and Huy Vu
No. RR−10−22. OUCL. November, 2010.