My research focuses on how people learn to build secure software — from the design of interactive learning modules to eye-tracking studies of how students read code, and models for evaluating the security of digital learning platforms.
A collaborative study examining how lower-level programming students apply secure-coding practices while reading and writing code, using eye-tracking to capture attention and comprehension. Currently in the preliminary phase.
Development of a security-evaluation model for home-based IoT devices. Currently in the preliminary phase.
Exploratory work on a new authentication mechanism for computing devices.
An NSA-funded prototype curriculum-management platform hosting cybersecurity learning objects, developed at Towson University. I assessed Section 508 accessibility compliance and overall system usability.
A novel security-evaluation model for digital libraries, built around five core security criteria decomposed into concrete requirements. The model was validated on CLARK through static code analysis and expert review, demonstrating its effectiveness.
Enhanced CS0 secure-coding modules incorporating segmentation and interactivity. A study across four sections showed the 2.0 modules significantly increased student engagement across demographics; by spring 2015 more than 20 instructors had adopted the modules.
Federal Award No. H98230-17-1-0405; Sub-award No. 33; Project #5040534; PO #8451.