Mastodon

I am a scholar in human-computer interaction and assistant professor at the University of North Carolina at Charlotte, where I direct the Security and Privacy Experiences (SPEX) research group. I am a faculty mentor for the UNC Charlotte Cybersecurity Clinic, and a member of the Human-Centered Computing (HCC) Lab, Center for Cyber Defense and Network Assurance (CyberDNA), Center for Energy Security and Reliability (CESaR), and Center for Humane AI Studies (CHAIS).

I work in usable privacy and security. My focus is on understanding how people's security attitudes and social environments weigh in their decision to adopt - or not adopt - secure behaviors (such as sharing passwords securely or ignoring UX cues to scams and "fake news"). I employ a mix of qualitative and quantitative methods from social science, computer science, and design. My work also is informed by prior experiences as a journalist, IT/UX specialist, and social media manager.

In 2018-19, I created the SA-6 security attitude scale. SA-6 is a six-item, self-report measure of a person's engagement with and attentiveness to cybersecurity measures. You are free to use it with attribution. Also, see my SA-13 inventory and the associated working paper for items measuring resistance and concernedness.

For Spring 2026, I am teaching one face-to-face course: ITIS 4360/5360: Human-Centered Artificial Intelligence (a mixed undergraduate/graduate course that counts for the Human-Centered Computing concentration). I also am mentoring 4 Undergraduate Research Fellows and a Special Topics course for graduate students in our Cybersecurity Clinic (listed as "Cybersecurity Clinic"). Contact me if you would like to speak to a class, help coach our clinic students, or be set up as a client.

Interested in survey research for HCI? Check out (and comment on) my list of books, papers and blog posts that either helped me or are good exemplars (some of them are my own papers) at this link. Also, see my slides on Subjective Methods.

Recent news:

  • I will be speaking at the M3AAWG 65th General Meeting, October 13-16, 2025, here in Charlotte, North Carolina. The topic is "Understanding and Mitigating SMiShing Vulnerability: Insights from U.S. Surveys and Interviews." The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) is an industry collaboration to work against bots, malware, spam, viruses, DoS attacks and other online exploitation.
  • Are you interested in - or even, teaching - Usable Security and Privacy? Check out my lectures on YouTube. I have been re-recording and posting these to a playlist. Subscribe! https://youtu.be/O4nz5cyGLtg?si=REgwrbNBuH6g7yqn
  • Regrettably, I will not be able to hire a new Phd student for the 2026 admissions cycle. If my funding situation changes, I will post this as soon as possible here and on social media.