Find a SECReT supervisor
prism apply now
Download SECReT Brochure
News and events
@UCLCrimeScience Mailing list

Iacovos Kirlappos

(email: i.kirlappos [at] cs.ucl.ac.uk)

Iacovos Kirlappos image


Inducing Information Security cultural changes in organisations and improving employee compliance with security mechanisms


Security compliance decision making by employees in large organisations

Simplification of Information Security policies to improve employee compliance

Implementation of effective Security Awareness, Education and Training to induce cultural change and improve employee compliance

Economic decision making models on security decisions - both at the individual and organisational level

Past Reseach Interests

Trust signalling and development in e-commerce settings

Anti-Phishing education


I am currently collaborating with a number of large organisations that are intereted in my research and the potential to improve on the security compliance rates of their employees.  I am very happy to initiate further collaboration with any organisation interested in applying my research to effectively tackle the security challenges they face. 


Investigating the development of trust in online retailers


BA Computer Science (University of Cambridge)

MSc Human-Computer Interaction with Ergonomics (University College London)


Limassol, Cyprus


To gain a thorough understanding of security as a scientific discipline before I move on to do research in usable security.  The multidisciplinary aspect of the course will give me insights to how security problems are addressed by other disciplines, that I could then use in my own research.

WHAT I DO WHEN I'M NOT STUDYINGI greatly enjoy traveling and I am also interested in photography.  In my free time I am trying to improve my guitar skills, I enjoy playing tennis, exercising at the gym and reading books


Work as an academic aiming to bring closer Security and Usability research, to create secure systems that can be easily used by the public without compromising their effectiveness


Kirlappos, I., Parkin, S., Sasse, M. A. (2014). Learning from “Shadow Security”: Why understanding non-compliance provides the basis for effective security. Workshop on Usable Security.

Kirlappos, I., Sasse, M. A. (2014). What usable security really means: Trusting and engaging users. HCI InternationalPublisher URL

Sasse, M. A., Kirlappos, I. (2014). Design for Trusted and Trustworthy Services: Why We Must Do Better. In Trust, Computing, and Society( pp.229-249). Cambridge University Press. Publisher URL

Michael Huth, JH Kuo, M. Angela Sasse, Iacovos Kirlappos, "Towards usable generation and enforcement of trust evidence from programmers' intent", Human aspects of information security privacy and trust, Las Vegas, Nevada, USA, 21 Jul 2013 - 26 Jul 2013. link

Iacovos Kirlappos, M. Angela Sasse, Nigel Harvey, "Why Trust Seals Don't Work: A study of user perceptions and behaviour", Trust 2012, 5th International Conference on Trust & Trustworthy Computing, Vienna, June 2012. link

Iacovos Kirlappos, M. Angela Sasse, "Security education against phishing: A modest proposal for a major re-think", IEEE Security and Privacy, 19 Dec. 2011. IEEE computer Society Digital Library. link

M. Angela Sasse, Iacovos Kirlappos, "Familiarity Breeds Con-victims: Why We Need More Effective Trust Signaling", Trust Management V, IFIP Advances in Information and Communication Technology, Springer: Boston, 2011 link


7th International Crime Science Conference (ICSC 2013), July 16, British Library, London, UK

Financial Cryptography and Data Security 2013 (FC 2013), April 1-5, Okinawa, Japan

ENISA Annual Privacy Forum (APF 2012), October 10-11, Limassol, Cyprus 

6th International Crime Science Conference (ICSC 2012), July 4, British Library, London, UK

TRUST 2012: 5th International Conference on Trust and Trustoworthy Computing, June 13-15, Vienna, Austria

The 6th Mediterranean Conference on Information Systems (MCIS 2011) -
IS: Crossroads of Technology, People, Organisations and Markets
September 3-5, Limassol, Cyprus

5th International Crime Science Conference (ICSC 2011), July 13, British Library, London, UK

Workshop on Security and Human Behaviour (SHB 2011),
June 17-18, The Heinz College and CyLab, Carnegie Mellon University, Pittsburgh, PA, USA

Workshop on Security and Human Behaviour (SHB 2010),
June 28-29, Computer Laboratory, University of Cambridge, Cambridge, UK

Research, Development and Innovation for a more secure Europe
(SRC '10, the 5th edition of the European Security Research Conference)
Kursaal, Ostend, Belgium, 22-24 September 2010