technology to consider the social and practical aspects of protecting data, privacy, and other assets, the security informatics track may be for you. In this track, you’ll focus on topics such as:
Watch how Security Informatics is making a difference
To better protect today’s computer systems and sensitive data, security professionals must understand the people as well as the technology. That’s why you’ll not only get a technical foundation in designing, implementing, and managing secure information technology systems, you’ll also gain insight into the social, legislative, and economic considerations affecting decisions people and businesses make about their own security.
Security professionals are in high demand in a wide variety of industries, so you can expect to have abundant career options when you graduate.
Security and Privacy in Informatics, Computing, and Engineering (SPICE) is the branch of informatics that studies and supports the design, evaluation, and implementation of technologies that enable control over information.
Learn more about SPICEInformation security has profound implications in all aspects of modern life. To better protect today's computer systems and sensitive data, security professionals must understand the people as well as the technology. The Security Informatics track takes a multi-faceted approach to information security that considers the numerous modern technical challenges, and then goes beyond technology to consider the social and practical aspects of protecting data, privacy, and other assets.
In this program, students receive a technical foundation in designing, implementing, and managing secure information technology systems. Additionally, students gain insight into the social, legislative, and economic considerations that affect the decisions people and businesses make about their own security. Security professionals are in high demand in a wide variety of industries, providing abundant career options for our graduates. The core educational goals for Security Informatics include:
Professor L. Jean Camp, is co-Director of the Center for Security and Privacy in Informatics, Computing, and Engineering. Her research areas include security, social informatics and proactive health informatics. Ph.D. in Engineering and Public Policy.
Assistant Professor, Mary Jean Amon, with advanced degrees in Experimental Psychology and Psychology in Education, has held research roles at Indiana University and the University of Colorado, focusing on user-oriented research to enhance decision-making within complex socio-technological systems, and has published widely in venues like CHI, CSCW, and IEEE Security and Privacy.
Assistant Professor, Cici Ling studies online abusive behavior across platforms using multi-modal, mixed methods to develop mitigation strategies; her work has been recognized in top venues like IEEE S&P and ACM CSCW and featured in outlets such as Wired. She has received honors including the 2023 EECS Rising Star award and the 2022 Meta PhD Fellowship.
Professor XiaoFeng Wang, is co-Director of the Center for Security and Privacy in Informatics, Computing, and Engineering. His research focuses on system security and data privacy, particularly in mobile and cloud computing and the dissemination and computation of human genomic data. Ph.D. in Computer Engineering.
Professor of Computer Science and Adjunct Professor of Mathematics
Associate Professor Apu Kapadia, is the Associate director of Cybersecurity Academic Programs. His research focuses on computer security and privacy issues in the context of social networks and wearable and sensor-enabled computing. Ph.D. Computer Science.
Assistant Professor, Hyungsub Kim's research focuses on system security with a focus on program analysis and formal methods to address security threats in robotic vehicles, including detecting and verifying patches for logic bugs and developing countermeasures against physical sensor attacks.
Assistant Professor, Thai Le earned his Ph.D. from Pennsylvania State University in 2022, his studies focused on Artificial Intelligence and Machine Learning, Natural Language Processing, Security and Privacy, and Security Informatics.
Assistant professor Xiaojing Liao's research interests include data-driven security, web security and privacy, with the specific focus on the investigation of cybercrime and cyber threat intelligence. Ph.D in Computer Engineering.
Assistant Professor, Chenhong Wang's research interests are related to system and software security, especially in developing and applying automated program analysis techniques for vulnerability discovery and security analysis in complex software systems (e.g., Linux kernel)
Assistant professor Luyi Xing's research focuses on the security of a wide range of systems, including mobile OSes, desktop OSes, IoT, Web, Cloud and applications on these systems. Ph.D. in Security Informatics.
Assistant Professor, Hang Zhang's research interests are related to system and software security, especially in developing and applying automated program analysis techniques for vulnerability discovery and security analysis in complex software systems (e.g, Linux kernel).
All required courses provided by faculty in the Security track, including the I609 Advanced Seminar, are open to students with sufficient background from other tracks and programs.
A student must successfully complete ninety (90) credit hours of graduate-level course work. The specific track requirements are below.
NOTE: A student must take I609 and/or I709.
NOTE: A student must complete two rotations of I790. A third roation will not count for course credit.
NOTE: These courses must be appropriate for a Ph.D. in Informatics.
NOTE: A student must complete an internal or external minor approved by the University Graduate School and the School. If a student selects an individualized minor, prior to taking courses, the University Graduate School must approve the proposed minor course list. There is no typical minor; however, students in the Security Informatics track have pursued minors in Computer Science, Psychology, Sociology, and Statistics.
NOTE: A student must have all electives approved by the student's advisor and the Director of Informatics Graduate Studies prior to enrolling in the course.
In addition to required courses, faculty in the track offer courses that provide more targeted training is specific areas.
Computer Science, Social Informatics, Psychology, Public Management, Complex Systems
There are three components to the security qualifier for doctoral candidacy. There is a comprehensive written exam. There is production of independent research. There is an oral defense of that independent research.
The written exam is a 4-hour closed book exam. During the exam the student may not reference any material except what is stored in the student’s head. Students must turn-off and place on the desk any cellphones, or other digital devices. The exam is broken in to four sections. First, there are breadth questions related to security in general that all students should know. Second, there are questions related to specific security courses the students have taken that are most applicable to the student’s area of research, and therefore is expected to have more than basic knowledge. Third, there are questions from a course that is related to the student’s minor. Fourth, and most in-depth, questions relating to the students research area. The advisor usually writes these last questions. The student must pass each of the four sections in order to pass the exam. The student will not discuss the questions on this exam with anyone but faculty at any point during or after the exam. The student will write the student’s answers exam in IU blue-books. On two occasions due to disability concerns the students have been provided stripped-down computers without internet access for the exam.
The second component is demonstrated research progress in a written form. Often this will take the form of work that has either been accepted in a peer-reviewed event or is judged as equivalent quality by the student’s qualifying committee. In some domains, most obviously theory and cryptography, there is not a requirement for a publishable unit but rather proof of clear research ability and knowledge as illustrated by significant progress.
The oral exam is a presentation of that publication. It requires the student be able to defend his or her own, and illustrate mastery. Every stage of the research is subject to question.
