Software Engineering Institute

This research looks into how we can establish trust, manage risk, and mitigate deceptive cyber-attacks when our decision-making is constrained to partial information concerning unknown vulnerabilities, system properties, and threats. The approach taken is to devise a fundamental model of human actions and the safety properties they affect.