Research

Digital forensics, attack modelling and cyber education

Thirty-seven journal papers, from attack graph perception and dashcam forensics to the Post Office Horizon scandal and AI-driven threat detection.

  • Impact
    3,178 citations, h-index 22 and i10-index 27 (Google Scholar, November 2026). Top 2% of Stanford-Elsevier Global Scientists (2024, 2026). Google Scholar profile
Attack graphs

How people perceive cyber attacks

Empirical studies of attack graphs, attack trees and MITRE ATT&CK in helping decision-makers understand attacks, published in IEEE Transactions on Information Forensics and Security, Computers & Security and Computer Science Review.

Digital forensics

Evidence from everyday devices

Dashcam forensics, iPhone geo-tags, BitTorrent registry artefacts and cloud investigations, plus guidelines now used in practice.

Threats and incidents

Understanding real-world attacks

Cyber attacks during the pandemic, attacks on universities and schools, and the Horizon scandal analysed as a socio-technical failure.

Selected publications

See all 72 publications, with links to the papers

  • 2026
    Lallie, H.S. The Horizon Scandal as Socio-Technical Failure: A Systematic Analysis Through Cyber Security and Digital Forensics Frameworks. Journal of Cybersecurity and Privacy 6(5).
  • 2026
    Legg, Coull, Clarke, Lallie and Atlam (eds.) Advances in Teaching and Learning for Cyber Security Education. Springer, LNNS 1791.
  • 2023
    Pirca and Lallie. An Empirical Evaluation of the Effectiveness of Attack Graphs and MITRE ATT&CK Matrices. Computers & Security.
  • 2021
    Lallie et al. Cyber security in the age of covid-19: a timeline and analysis of cyber-crime and cyber-attacks during the pandemic. Computers & Security 105.
  • 2020
    Lallie, Debattista and Bal. A review of attack graph and attack tree visual syntax in cyber security. Computer Science Review 35.
  • 2018
    Lallie, Debattista and Bal. An Empirical Evaluation of the Effectiveness of Attack Graphs and Fault Trees in Cyber-Attack Perception. IEEE Transactions on Information Forensics and Security 13(5).

Funded projects

  • 2022
    CyberKali, NCSC. Principal Investigator, £90,000.
  • 2021
    ResiSpace: secure software engineering standardisation for space mission systems. Co-Investigator, £67,024.
  • 2015
    Cyber security pedagogy, Higher Education Academy. Co-Investigator, £29,000.

Service to research

  • PhD supervisor
  • 9 PhD upgrade panels
  • PhD examiner, Oxford
  • Reviewer: IEEE TIFS
  • Reviewer: IEEE TDSC
  • Reviewer: Computers & Security
  • Co-Chair, DFRWS EU 2024

Get in touch

Let's talk cyber security, forensics or Sikh music.

I welcome invitations to speak, collaborate on research, advise on curricula and examine. The easiest way to reach me is through the contact form.