Shamal Faily

ORCID

Publication Activity (10 Years)

Years Active: 2008-2022
Publications (10 Years): 47

Top Venues

University of Oxford, UK (PHD)

Education History

University of Oxford, UK

PHD

Publications

Jane Henriksen-Bulmer, Cagatay Yucel, Shamal Faily, Ioannis Chalkias
Privacy Goals for the Data Lifecycle. Future Internet 14 (11) (2022)
Rob Ashmore, Andrew Howe, Rhiannon Chilton, Shamal Faily
Programming Language Evaluation Criteria for Safety-Critical Software in the Air Domain. ISSRE Workshops (2022)
Duncan Ki-Aries, Shamal Faily, Huseyin Dogan, Christopher Williams
Assessing system of systems information security risk with OASoSIS. Comput. Secur. 117 (2022)
Amna Altaf, Shamal Faily, Huseyin Dogan, Eylem Thron, Alexios Mylonas
Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis. CyberICPS/SECPRE/ADIoT/SPOSE/CPS4CIP/CDT&SECOMANE@ESORICS (2021)
Amna Altaf, Shamal Faily, Huseyin Dogan, Alexios Mylonas, Eylem Thron
Use-Case Informed Task Analysis for Secure and Usable Design Solutions in Rail. CRITIS (2021)
Callum Pilton, Shamal Faily, Jane Henriksen-Bulmer
Evaluating privacy - determining user privacy expectations on the web. Comput. Secur. 105 (2021)
Shamal Faily, Claudia Iacob, Raian Ali, Duncan Ki-Aries
Visualising personas as goal models to find security tensions. Inf. Comput. Secur. 29 (5) (2021)
Shamal Faily, Claudia Iacob, Raian Ali, Duncan Ki-Aries
Identifying Implicit Vulnerabilities Through Personas as Goal Models. CyberICPS/SECPRE/ADIoT@ESORICS (2020)
Claudia Iacob, Shamal Faily
The Impact of Undergraduate Mentorship on Student Satisfaction and Engagement, Teamwork Performance, and Team Dysfunction in a Software Engineering Group Project. SIGCSE (2020)
Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
Contextualisation of Data Flow Diagrams for security analysis. CoRR (2020)
Jane Henriksen-Bulmer, Shamal Faily, Sheridan Jeary
DPIA in Context: Applying DPIA to Assess Privacy Risks of Cyber Physical Systems. Future Internet 12 (5) (2020)
Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
Contextualisation of Data Flow Diagrams for Security Analysis. GraMSec@CSF (2020)
Shamal Faily, Claudia Iacob, Raian Ali, Duncan Ki-Aries
Identifying Implicit Vulnerabilities through Personas as Goal Models. CoRR (2020)
Claudia Iacob, Shamal Faily
Exploring the gap between the student expectations and the reality of teamwork in undergraduate software engineering group projects. J. Syst. Softw. 157 (2019)
Jane Henriksen-Bulmer, Shamal Faily, Sheridan Jeary
Privacy risk assessment in context: A meta-model based on contextual integrity. Comput. Secur. 82 (2019)
Shamal Faily, Duncan Ki-Aries
Usable and Secure Requirements Engineering with CAIRIS. RE (2019)
Amna Altaf, Shamal Faily, Huseyin Dogan, Alexios Mylonas, Eylem Thron
Identifying Safety and Human Factors Issues in Rail Using IRIS and CAIRIS. CyberICPS/SECPRE/SPOSE/ADIoT@ESORICS (2019)
Andrew M'manga, Shamal Faily, John McAlaney, Chris Williams, Youki Kadobayashi, Daisuke Miyamoto
A normative decision-making model for cyber security. Inf. Comput. Secur. 27 (5) (2019)
Claudia Iacob, Shamal Faily
Redesigning an undergraduate software engineering course for a large cohort. ICSE (SEET) (2018)
Duncan Ki-Aries, Shamal Faily, Huseyin Dogan, Christopher Williams
System of Systems Characterisation assisting Security Risk Assessment. SoSE (2018)
Duncan Ki-Aries, Shamal Faily, Huseyin Dogan, Christopher Williams
Assessing System of Systems Security Risk and Requirements with OASoSIS. ESPRE@RE (2018)
Joshua Coles, Shamal Faily, Duncan Ki-Aries
Tool-Supporting Data Protection Impact Assessments with CAIRIS. ESPRE@RE (2018)
Jane Henriksen-Bulmer, Shamal Faily, Sheridan Jeary
Implementing GDPR in the Charity Sector: A Case Study. Privacy and Identity Management (2018)
Andrew M'manga, Shamal Faily, Chris Williams, John McAlaney
Rationalising Decision Making about Risk: A Normative Approach. HAISA (2018)
Andrew M'manga, Shamal Faily, John McAlaney, Christopher Williams
System design considerations for risk perception. RCIS (2017)
Jane Henriksen-Bulmer, Shamal Faily
Applying Contextual Integrity to Open Data Publishing. BCS HCI (2017)
Shamal Faily, Claudia Iacob
Design as Code: Facilitating Collaboration Between Usability and Security Engineers Using CAIRIS. RE Workshops (2017)
Duncan Ki-Aries, Shamal Faily, Huseyin Dogan, Christopher Williams
Re-framing "the AMN": A case study eliciting and modelling a System of Systems using the Afghan Mission Network. RCIS (2017)
Claudia Iacob, Shamal Faily
Using Extreme Characters to Teach Requirements Engineering. CSEE&T (2017)
Andrew M'manga, Shamal Faily, John McAlaney, Christopher Williams
Folk Risk Analysis: Factors Influencing Security Analysts' Interpretation of Risk. SOUPS (2017)
Duncan Ki-Aries, Huseyin Dogan, Shamal Faily, Paul Whittington, Christopher Williams
From Requirements to Operation: Components for Risk Assessment in a Pervasive System of Systems. RE Workshops (2017)
Duncan Ki-Aries, Shamal Faily
Persona-centred information security awareness. Comput. Secur. 70 (2017)
Duncan Ki-Aries, Shamal Faily, Kristian Beckers
Persona-Driven Information Security Awareness. BCS HCI (2016)
Kristian Beckers, Shamal Faily, Seok-Won Lee, Nancy R. Mead
Welcome to the Third Workshop on Evolving Security and Privacy Requirements Engineering (ESPRE). RE Workshops (2016)
Shamal Faily, Georgia Lykou, Anton Partridge, Dimitris Gritzalis, Alexios Mylonas, Vasilios Katos
Human-Centered Specification Exemplars for Critical Infrastructure Environments. BCS HCI (2016)
Shamal Faily, Claudia Iacob, Sarah Field
Ethical Hazards and Safeguards in Penetration Testing. BCS HCI (2016)
Shamal Faily, Ivan Flechais
Finding and resolving security misusability with misusability cases. Requir. Eng. 21 (2) (2016)
Claudia Iacob, Shamal Faily
Improving Human-Reviews Interaction: A Study of the Role, Use, and Place of Online Reviews. BCS HCI (2016)
Claudia Iacob, Shamal Faily, Rachel Harrison
MARAM: Tool Support for Mobile App Review Management. MobiCASE (2016)
Anton Partridge, Shamal Faily
The Application of useless Japanese Inventions for Requirements Elicitation in Information Security. BCS HCI (2016)
Shamal Faily
Engaging stakeholders during late stage security design with assumption personas. Inf. Comput. Secur. 23 (4) (2015)
Raian Ali, John McAlaney, Shamal Faily, Keith Phalp, Vasilios Katos
Mitigating Circumstances in Cybercrime: A Position Paper. CIT/IUCC/DASC/PICom (2015)
Claudia Iacob, Shamal Faily, David Bell
Special section: software quality for mobile apps. Softw. Qual. J. 23 (3) (2015)
Shamal Faily, John McAlaney, Claudia Iacob
Ethical Dilemmas and Dimensions in Penetration Testing. HAISA (2015)
Antonios Vallindras, Shamal Faily
The mystery of security design. BCS HCI (2015)
Neil McDonald, Shamal Faily, Marcella Favale, Christos Gatzidis
Digital Rights Management: The Four Perspectives of Developers, Distributors, Users, and Lawyers. HAISA (2015)
Shamal Faily, George Stergiopoulos, Vasilios Katos, Dimitris Gritzalis
"Water, Water, Every Where": Nuances for a Water Industry Critical Infrastructure Specification Exemplar. CRITIS (2015)
Shamal Faily
Engaging Stakeholders in Security Design: An Assumption-Driven Approach. HAISA (2014)
Shamal Faily, John Lyle, Ivan Flechais, Andrea S. Atzeni, Cesare Cameroni, Hans I. Myrhaug, Ayse Göker, Robert Kleinfeld
Authorisation in Context: Incorporating Context-Sensitivity into an Access Control Framework. BCS HCI (2014)
Shamal Faily, Ivan Flechais
Eliciting and visualising trust expectations using persona trust characteristics and goal models. SSE@SIGSOFT FSE (2014)
Shamal Faily, Lizzie Coles-Kemp, Paul Dunphy, Mike Just, Yoko Akama, Alexander De Luca
Designing interactive secure system: chi 2013 special interest group. CHI Extended Abstracts (2013)
Shamal Faily, John Lyle
Guidelines for integrating personas into software engineering tools. EICS (2013)
John Lyle, Claes Nilsson, Anders Isberg, Shamal Faily
Extending the web to support personal network services. SAC (2013)
Shamal Faily, David Power, Philip Armstrong, Ivan Flechais
Formal Evaluation of Persona Trustworthiness with EUSTACE - (Extended Abstract). TRUST (2013)
Claudia Iacob, Rachel Harrison, Shamal Faily
Online Reviews as First Class Artifacts in Mobile App Development. MobiCASE (2013)
Tao Su, John Lyle, Andrea S. Atzeni, Shamal Faily, Habib Virji, Christos Ntanos, Christos Botsikas
Continuous Integration for Web-Based Software Infrastructures: Lessons Learned on the webinos Project. Haifa Verification Conference (2013)
Christian Fuhrhop, John Lyle, Shamal Faily
The webinos project. WWW (Companion Volume) (2012)
John Lyle, Andrew J. Paverd, Justin King-Lacroix, Andrea S. Atzeni, Habib Virji, Ivan Flechais, Shamal Faily
Personal PKI for the Smart Device Era. EuroPKI (2012)
John Lyle, Salvatore Monteleone, Shamal Faily, Davide Patti, Fabio Ricciato
Cross-Platform Access Control for Mobile Web Applications. POLICY (2012)
Shamal Faily, John Lyle, Cornelius Namiluko, Andrea S. Atzeni, Cesare Cameroni
Model-driven architectural risk analysis using architectural and contextualised attack patterns. MDsec@MoDELS (2012)
John Lyle, Shamal Faily, Ivan Flechais, André Paul, Ayse Göker, Hans I. Myrhaug, Heiko Desruelle, Andrew P. Martin
On the Design and Development of webinos: A Distributed Mobile Application Middleware. DAIS (2012)
Shamal Faily, John Lyle, André Paul, Andrea S. Atzeni, Dieter Blomme, Heiko Desruelle, Krishna Bangalore
Requirements Sensemaking Using Concept Maps. HCSE (2012)
Shamal Faily, Ivan Flechais
Eliciting usable security requirements with misusability cases. RE (2011)
Shamal Faily
Bridging User-Centered Design and Requirements Engineering with GRL and Persona Cases. iStar (2011)
Shamal Faily, Ivan Flechais
Eliciting Policy Requirements for Critical National Infrastructure Using the IRIS Framework. Int. J. Secur. Softw. Eng. 2 (4) (2011)
Shamal Faily, Ivan Flechais
Persona cases: a technique for grounding personas. CHI (2011)
Andrea S. Atzeni, Cesare Cameroni, Shamal Faily, John Lyle, Ivan Flechais
Here's Johnny: A Methodology for Developing Attacker Personas. ARES (2011)
Shamal Faily, Ivan Flechais
User-Centered Information Security Policy Development in a Post-Stuxnet World. ARES (2011)
Shamal Faily, Ivan Flechais
Towards Tool-Support for Usable Secure Requirements Engineering with CAIRIS. Int. J. Secur. Softw. Eng. 1 (3) (2010)
Shamal Faily, Ivan Flechais
Designing and Aligning e-Science Security Culture with Design. Inf. Manag. Comput. Secur. 18 (5) (2010)
Shamal Faily, Ivan Flechais
A Model of Security Culture for e-Science. SAISMC (2010)
Shamal Faily, Ivan Flechais
A meta-model for usable secure requirements engineering. SESS@ICSE (2010)
Shamal Faily, Ivan Flechais
The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design. HCSE (2010)
Shamal Faily, Ivan Flechais
Barry is not the weakest link: eliciting secure system requirements with personas. BCS HCI (2010)
Shamal Faily, Ivan Flechais
To boldly go where invention isn't secure: applying security entrepreneurship to secure systems design. NSPW (2010)
Shamal Faily, Ivan Flechais
Analysing and Visualising Security and Usability in IRIS. ARES (2010)
Shamal Faily, Ivan Flechais
Context-Sensitive Requirements and Risk Management with IRIS. RE (2009)
Shamal Faily
Towards Requirements Engineering Practice for Professional End User Developers: A Case Study. REET (2008)

Shamal Faily.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Shamal Faily