Description

Seclab’s mission is to advance theory and practice in computer and information security, for the benefit of society. Our approach is holistic and we shed light on the problems of security and risk from many different perspectives – e.g. technical, social, managerial, economic and legal. Our research is situated in a computer and systems science context, founded on General Systems Theory and Cybernetics, Living Systems theory and Soft Systems Methodology, and we also utilize reference disciplines such as sociology, pedagogy, psychology, jurisprudence, economics, mathematics etc. Our audience is composed of academics as well as of industrial and governmental organization and includes also professional bodies.

Security and risk in connection with ICT appears at all aspect and levels of the system – technical as well as operational, managerial, economical and social. Even though security and risk may be seen as comprising finite, general and level-recursive principles, there exist various and many models/frameworks/theories, which may confuse and dim rather than promote the understanding of security. There are models that see the problem from a bottom up view as an onion with cryptographic algorithms, formal models, hardware kernels with layered operating system, utilities, applications, API’s, and HCI-aspects. There are frameworks that see security from a top down view, with risk and security Governance and Management, Policy making on top, followed by the implementation of operational and technical policies that steer and control through audit and feedback loops and forensics analysis. All these models are used at Seclab with an applied computer and system science research approach which aims to understand, measure, protect and predict insecurities and security in information and communication systems.