My research focuses on human-centered computer security. I'm interested in understanding and influencing security and privacy behaviors and preferences by collecting real data from real users. Recently I have focused on topics including making security easier for professionals such as sysadmins and software developers, understanding how and why end users learn and apply security behaviors, and investigating adoption of end-to-end encrypted messaging.