Sotabase

Career

· Ph.D. in Public Policy and Management, Carnegie Mellon University2006–2012
· Security Professional, Financial and E-commerce Industries
· Microsoft Research Fellow, New York University, Information Law Institute
· Cyber Policy Advisor, Pentagon, Office of the Secretary of Defense for Policy (OSDP)
· Senior Policy Researcher, RAND Corporation
· B.S. in Electrical Engineering, University of Calgary

Publications (48)

Common Vulnerability Scoring System
IEEE Security and Privacy · 2006
791
cited
A Complete Guide to the Common Vulnerability Scoring System Version 2.0 | NIST
2007
528
cited
Examining the costs and causes of cyber incidents
Journal of Cybersecurity · 2016
255
cited
Human selection of mnemonic phrase-based passwords
Symposium On Usable Privacy and Security · 2006
254
cited
Do Data Breaches Disclosure Laws Reduce Identity Theft?
Workshop on the Economics of Information Security · 2010
205
cited
Content analysis of cyber insurance policies: how do carriers price cyber risk?
Journal of Cybersecurity · 2019
155
cited
Do data breach disclosure laws reduce identity theft?: Do Data Breach Disclosure Laws Reduce Identity Theft?
2011
145
cited
The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems
2007
121
cited
Exploit Prediction Scoring System (EPSS)
DTRAP · 2019
114
cited
Improving vulnerability remediation through better exploit prediction
Journal of Cybersecurity · 2020
86
cited
Privacy Costs and Personal Data Protection: Economic and Legal Perspectives
2009
81
cited
Privacy patterns for online interactions
Conference on Pattern Languages of Programs · 2006
81
cited
Empirical Analysis of Data Breach Litigation
Workshop on the Economics of Information Security · 2013
75
cited
Consumer Attitudes Toward Data Breach Notifications and Loss of Personal Information
2016
59
cited
Content Analysis of Cyber Insurance Policies: How Do Carriers Write Policies and Price Cyber Risk?
2017
51
cited
Data Breaches and Identity Theft: When is Mandatory Disclosure Optimal?
Workshop on the Economics of Information Security · 2010
41
cited
Enhancing Vulnerability Prioritization: Data-Driven Exploit Predictions with Community-Driven Insights
2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · 2023
37
cited
Embracing and controlling risk dependency in cyber-insurance policy underwriting
Journal of Cybersecurity · 2019
27
cited
Private-Sector Attribution of Cyber Incidents: Benefits and Risks to the U.S. Government
The international journal of intelligence and counter intelligence · 2020
21
cited
The Internet of Bodies: Opportunities, Risks, and Governance
2020
16
cited
Sotabase
Sasha Romanosky | Researcher Profile | Sotabase | Sotabase