Background and services provided

1. DIATOMIC Cybersecurity
Proactive prevention and protection
Mark Stockman,
Joe Nedelec, Bill Mackey
1

2. Interdisciplinary Approach
School of Information Technology:
– Mark Stockman
School of Criminal Justice:
– Joe Nedelec
– Bill Mackey
Empirically driven team adding human behavior to
cyber.
2

3. Services
Behavioral Cyberthreat Assessment
– Identify risk at multiple levels
Organization, department, individual
– Non-malicious behavior
Behavioral Cyberthreat Mitigation
– Customized risk reduction strategies
– Incentivize best practice
3

4. Behavior/Decisions
2015 Verizon Data Breach Investigations Report
4

5. 5
Cause of data breach by cause
2005-2015 (n=4,539)

6. 6
Cause of data breach in financial sector
2005-2015 (n=592)

7. 7
What we know about data breaches by major
industry and cause of breach, 2005-2015 (n=3,899)

8. 8
Cause of breach in financial sector
2005-2015 (n=592)

9. US crime rate per 100k
Bureau of Justice Statistics
9

10. Crime Science
Center for Problem Oriented Policing
10

11. Behavioral Economics 11

12. Stockman, Holt, Mackey, & Holiday, 2013 Cyberdeviance Study
“I’ve never had the need,
skillset, or knowledge”
“Been too busy to learn”
“Number 1 it is wrong.
Number 2, I would have
no idea where to start”
Why not hack? (or follow policy?)12

13. Non-malicious Insider Risk
Intermedia 2015 Insider Risk Report
13

14. Non-malicious Insider Risk
Intermedia 2015 Insider Risk Report
14

15. Non-malicious Insider Risk
Intermedia 2015 Insider Risk Report
15

16. Analyze and Affect Behavior
 DIATOMIC Breach Database
 Employee surveys/interviews
 Vulnerability reports*
 IT/Info Sec policies*
16

17. Services
Behavioral Cyberthreat Assessment
– Identify risk at multiple levels
Organization, department, individual
– Non-malicious behavior
Behavioral Cyberthreat Mitigation
– Customized risk reduction strategies
– Incentivize best practice
17

18. DIATOMIC Cybersecurity
Mark Stockman
Associate Professor, Information
Technology
Joe Nedelec
Assistant Professor, Criminal Justice
Bill Mackey
Doctoral Student, Criminal Justice
18

19. Mark Stockman is an Associate Professor at the University of Cincinnati serving
as a faculty member in the School of Information Technology teaching networking,
systems, and cybersecurity courses. His research interests include systems
administration, server virtualization, cloud computing management, and IT pedagogy.
With recent study of traditional criminology and crime prevention, his current
research focusses on cybersecurity. Specifically, Mark is investigating the
applicability of criminological theories in the digital realm or cybercrime science. Mr.
Stockman is the former Chair of the ACM Special Interest Group for Information
Technology Education (SIGITE), a community that has defined IT as an academic
discipline; and is also now active in a similar effort for the cyber sciences, the Cyber
Education Project (CEP). Along with industry experience prior to becoming a
professor, he holds a BS in Industrial and Systems Engineering from Ohio University,
Russ College of Engineering and Technology, and an MBA from Ohio University,
College of Business. – mark.stockman@uc.edu
19

20. Joe Nedelec received his undergraduate degrees (criminology and psychology)
and his master’s degree (criminology) from Simon Fraser University in Burnaby,
British Columbia. His doctoral degree (criminology) was received from Florida State
University. Dr. Nedelec’s primary research interests lie within biosocial criminology,
with specific focus on evolutionary psychology, life-history theory, digit ratio, and
behavioral genetics. He has published articles on biosocial criminology in a variety
of journals including Child Psychiatry and Human Development, Criminology,
Evolution and Human Behavior, Intelligence, Journal of Criminal Justice, Personality
and Individual Differences, and others. He has also incorporated topics related to
cybercrime and cyber-security into his research agenda and has a secondary
appointment with the School of Information Technology at UC. Dr. Nedelec teaches
in the areas of life-course/developmental criminology, cybercrime, research methods,
and statistics. He is also co-founder and current Vice President of the Biosocial
Criminology Association (www.biosocialcrim.org). – joseph.nedelec@uc.edu
20

21. Bill Mackey is a doctoral student at the University of Cincinnati. His research
interests include: cybercriminology, social engineering, technological advances in
crime and crime prevention, white-collar crime, and criminological theory. Bill’s
current research is focused on correlates of human behavior in data breaches and
the application of criminological theory to cybercrime and breach prevention. Bill has
published works in the areas of social engineering, advanced crime prevention
technologies, and individual differences in both white-collar offenders and hackers.
Mr. Mackey is a member of the Cincinnati Bell Digital Forensics Working Group, the
National White-Collar Crime Research Consortium, and the American Society of
Criminology. He received a dual bachelor’s degree in psychology and criminology
from Iowa State University, a master’s degree in criminology from Indiana State
University, and is currently finishing his Ph.D. in criminology at the University of
Cincinnati. – william.mackey@uc.edu
21