Dr Ingolf Becker

I am an Associate Professor in Security and Crime Science in the Department of Security and Crime Science at University College London.

My research focuses on human-centred security and privacy. I believe that security and privacy is never the primary task. It enables productivity for individuals and organisations, and, more fundamentally, the trust a functioning society depends on. I work with people and organisations to build and study systems and policies that are both secure and productive.

News

16/10/26 Our paper Right Concept, Wrong Application? Psychological Effects in Phishing Simulations Drive Training Intentions and Repeat Clicking (with Niklas George, Nida ul Habib Bajwa and Sarah Zheng) has been accepted at the IEEE Symposium on Security and Privacy 2027. Across four phishing simulations sent to over 18,000 employees each, click and credential-submission rates rose rather than fell, and those caught out before were more likely to be caught out again. Simulations did not clearly reduce victimisation, but being caught lowered self-efficacy and raised negative emotions and acceptance of training, which in turn shaped whether employees wanted further training; so simulations may be better at motivating training than at teaching detection. The analysis and the dataset are openly available, and the artifact was awarded all three IEEE artifact badges: Available, Functional and Reproduced.
10/10/26 Our systematic review Unaware, unfunded, untrained, and unsupported: a systematic review of cybersecurity in small and medium enterprises (with Carlos Rombaldo Junior and Shane Johnson) is finally out in the Journal of Cybersecurity, open access.
30/09/26 I attended NSPW '26 in Sooke, British Columbia, as a programme committee member: eleven papers, four days of prepared, in-depth discussion on the edge of the Pacific, and as thought-provoking as ever.
21/07/26 Carlos Rombaldo Junior presented our forthcoming paper "Unaware, unfunded and uneducated: A systematic review of SME cybersecurity" (preprint, to appear in the Journal of Cybersecurity) at the SME Cybersecurity, Privacy, and Trust (SME-CPT) Workshop 2026 at the University of Kent. SMEs are the backbone of our society (in the UK, 5.7 million SMEs constitute 99% of businesses, 60% of employment, and 51% of turnover), yet are substantially under-researched and under-supported. Events like these are key to bringing together practitioners, government and academia.
10/06/26 My PhD student Marilyne Ordekian (co-supervised with Dr Marie Vasek) successfully defended her thesis Cyber (In)Security at the Nexus of Cryptocurrency Regulation, Service Providers, and Users. Many thanks to her examiners, Daniel Thomas and Douglas Arner. Congratulations Dr Ordekian!
03/06/26 My PhD student Liberty Kent presented our paper A Comparative Analysis of Situational Awareness Support in Cyber Incident Response Ticketing Systems (with Nilufer Tuptuk) at Cyber Science 2026 at Royal Holloway University of London. The proceedings will appear in the Springer Proceedings in Complexity.
31/03/26 On 31 March 2026, 85 current and former students, collaborators, colleagues and friends came together at University College London for a Festschrift Symposium celebrating 35 years of my PhD supervisor, Prof Angela Sasse, and her contributions to Computer Science and human-centred security. Dr Sarah Zheng presented our position paper What Phishing Click Rates Don't Show.
14/10/25 I was invited to be part of the UK Cyber Security Mission to Chile to represent UK academia. I was part of three panels where I spoke about my research on data protection and regulation, banking security and cybersecurity in higher education in the UK. I also gave a seminar at the Universidad de Chile, with the team of Alejandro Hevia. These were busy and exciting days, with lots of thoughtful discussions, and a space for future collaborations!

Recent Publications

A complete list of my publications can be found here or on my Google Scholar Profile.

Recent Projects

Protecting public-facing professionals and their dependants online (3PO)

The 3PO was an EPSRC funded project associated with the National Research Centre on Privacy, Harm Reduction and Adversarial Influence Online. We focused on protecting public-facing police personnel and their dependants online by co-designing vulnerability assessments, harm reporting apps, and various risk assessment tools, alongside training and supporting materials.

Kris Christman was the senior research fellow for the project and is continuing some of the unfinished work in an honorary position at UCL.

Secure Development

Dr Charles Weir and I have been working on a project to improve software security through a bottom-up approach. We focus on helping developers understand, appropriately evaluate and promote security inside their organisations. After working with almost a dozen organisations and publishing our results in conferences and journals, we successfully commercialised our project through CyberASAP in 2021. We still hold regular training events, and our workshop and materials are open source and can be used free of charge. We continue working with companies, both for research to improve the package and for consultancy to help deliver the training. We have good links with organisations specialising in training and professional development, and certification bodies to improve secure software development in the UK and abroad.

Attitudes, Barriers, and Incentives to Secure IoT

Dr Tristan Caulfield and I collaborate with colleagues from Japan's National Institute of Information and Communications Technology (NICT) on cross-cultural studies of internet service providers' and individuals' attitudes, barriers, and incentives to secure the internet of things. The first part of this work was published at USENIX Security '23.

Research Supervision

I mainly supervise PhD students through the Dawes Centre for Future Crime and UCL SECReT. If you want to study with me through one of these routes, please email me, with a research proposal and CV attached, before submitting an application to UCL.

My department also runs the EPSRC CDT in Cyber-Physical Risk, which is very active and where I supervise students. This CDT is project-led: my colleagues and I propose the projects for which we recruit students. If you are interested, please browse the available topics and contact the relevant academics directly.

Current Students

Finished Students

Teaching

Professional Activities

Program Committees

External Reviewing

Academic Service

Contact

Email

i.becker at ucl.ac.uk

Post

Dr Ingolf Becker
Security and Crime Science
University College London
Gower Street
London
WC1E 6BT
United Kingdom