Evidence-Based Cybersecurity: Foundations, Research, and Practice
暫譯: 基於證據的網路安全：基礎、研究與實踐

本書旨在解釋基於證據的網路安全方法的基礎，回顧其在現有安全工具和政策背景下的相關性，並提供具體範例，說明採用此方法如何改善網路安全操作並指導政策制定者的決策過程。

Dr. Pierre-Luc Pomerleau is a Partner at VIDOCQ. His role consists of assisting VIDOCQ'S clients in growing their business and innovating while managing their risks and protecting their assets. He does so by bringing years of experience and deep expertise in cybercrime, investigation, fraud prevention, anti-money laundering, physical security, business administration, technology, and risk management. Before joining VIDOCQ, he was Vice President at National Bank of Canada, managing the Financial Crime and Corporate Security division, including data analytics and innovation.

Dr. Pomerleau holds a Ph.D. in Business Administration with a specialization in Homeland Security from Northcentral University (USA), an MBA from the University of Sherbrooke (Canada), and a bachelor's degree in criminology from the University of Montreal (Canada). He holds various security and financial crime professional certifications such as the CPP, PSP, PCI, CFE, CAMS, CCCI & CFCI certifications. In addition to his role with VIDOCQ, Dr. Pomerleau is currently an adjunct in cybersecurity at Polytechnique Montreal. From 2020 to 2021, he was a postdoctoral researcher and a research associate in cybercrime at Georgia State University (USA). In 2020, he published his book Countering Cyber Threats to Financial Institutions; A Private and Public Partnership Approach to Critical Infrastructure. From 2015 to 2018, he was the President of the Association of Certified Fraud Examiner Montreal Chapter. In October 2016, he was awarded an honorary diploma by the University of Montreal School of Criminology for his exemplary contribution to the advancement of society.

Dr. David Maimon is an Associate Professor in the Department of Criminal Justice and Criminology at Georgia State University (GSU) and the director of the Evidence-Based Cybersecurity research group (see ebcs.gsu.edu). He received his Ph.D. in Sociology from the Ohio State University in 2009. Prior to joining GSU, Dr. Maimon held academic position in the Department of Criminology and Criminal Justice in the University of Maryland, and the Department of Sociology in the University of Miami. In 2015 he was awarded the "Young Scholar Award" from the "White-Collar Crime Research Consortium of the National White-Collar Crime Center" for his cybercrime research. Throughout his career he has raised more than $3 million to conduct Evidence-Based Cybersecurity research. Since joining GSU, Dr. Maimon has established the Evidence-Based Cybersecurity Research Group, where he and his researchers seek to produce and review multi- and interdisciplinary empirical evidence about the effectiveness of cybersecurity tools and policies. The group and its unique approach to cybersecurity education and research have been acknowledged on popular media platforms (https: //edtechmagazine.com/higher/article/2020/09/training-next-generation-cyber-professionals). Moreover, the group's close relationships with cybersecurity professionals in several industries and law enforcement agencies have led to the adoption of the Evidence-Based Cybersecurity approach by several organizations. Dr. Maimon teaches the course "Intro to Evidence-Based Cybersecurity" at the undergraduate level, and "Evidence-Based Cybersecurity" at the graduate level.

皮埃爾-盧克·波梅羅（Dr. Pierre-Luc Pomerleau）是VIDOCQ的合夥人。他的角色是協助VIDOCQ的客戶在增長業務和創新同時，管理風險和保護資產。他通過帶來多年的經驗和在網路犯罪、調查、詐騙預防、反洗錢、實體安全、商業管理、技術和風險管理方面的深厚專業知識來實現這一目標。在加入VIDOCQ之前，他曾擔任加拿大國家銀行的副總裁，負責金融犯罪和企業安全部門，包括數據分析和創新。

波梅羅博士擁有北中大學（美國）商業管理博士學位，專攻國土安全，並擁有舍布魯克大學（加拿大）的MBA學位和蒙特利爾大學（加拿大）的犯罪學學士學位。他持有多項安全和金融犯罪專業認證，如CPP、PSP、PCI、CFE、CAMS、CCCI和CFCI認證。除了在VIDOCQ的角色外，波梅羅博士目前還是蒙特利爾理工學院的網路安全兼任教授。從2020年到2021年，他在喬治亞州立大學（美國）擔任網路犯罪的博士後研究員和研究助理。2020年，他出版了《對金融機構的網路威脅反制：私營和公共夥伴關係對關鍵基礎設施的應對》一書。從2015年到2018年，他擔任蒙特利爾認證詐騙檢查員協會的會長。2016年10月，他因對社會進步的卓越貢獻而獲得蒙特利爾大學犯罪學院的榮譽文憑。

大衛·梅門（Dr. David Maimon）是喬治亞州立大學（GSU）刑事司法與犯罪學系的副教授，也是基於證據的網路安全研究小組的主任（詳見ebcs.gsu.edu）。他於2009年在俄亥俄州立大學獲得社會學博士學位。在加入GSU之前，梅門博士曾在馬里蘭大學的犯罪學與刑事司法系和邁阿密大學的社會學系擔任學術職位。2015年，他因其網路犯罪研究獲得「全國白領犯罪中心白領犯罪研究聯盟」的「青年學者獎」。在他的職業生涯中，他籌集了超過300萬美元以進行基於證據的網路安全研究。自加入GSU以來，梅門博士建立了基於證據的網路安全研究小組，他和他的研究人員致力於產出和審查有關網路安全工具和政策有效性的多學科和跨學科的實證證據。該小組及其獨特的網路安全教育和研究方法已在流行媒體平台上獲得認可（https://edtechmagazine.com/higher/article/2020/09/training-next-generation-cyber-professionals）。此外，該小組與多個行業的網路安全專業人士和執法機構的密切關係促使多個組織採用基於證據的網路安全方法。梅門博士在本科層次教授「基於證據的網路安全導論」課程，在研究生層次教授「基於證據的網路安全」課程。