Eliot Rich, Ph.D.

My recent work focuses on behavioral aspects of computer security. Through the tools of System Dynamics my colleagues and I are looking at how feedback and knowledge transfer create unusual and interesting problems in the implementation of security regimes.

 

Peer-Reviewed Journals

Rich, E., "Management Fads and Information Delays: An Exploratory Simulation Study", Journal of Business Research, forthcoming.

Martinez-Moyano, I., Rich, E., Conrad, S., Andersen, D., Stewart, T., “A Behavioral Theory of Insider-Threat Risks:  A System Dynamics Approach”, ACM Transactions on Modeling and Computer Simulation 18(2), 2008. Abstract.

Rich, E., "E-ZPass and the Ohio Turnpike:  Adoption and Integration of Electronic Toll Collection", Journal of Cases in Information Technology, 10(1), 32-44, 2008. Abstract.

Sveen, F. O., Rich, E., Jager, M., “Overcoming Organizational Challenges to Secure Knowledge Management”, Information Systems Frontiers 9(5), 481-492, 2007. Abstract.

Sveen, F. O., Sarriegi, J. M., Rich, E., Gonzalez, J. J., "Toward Viable Information Security Reporting Systems", Information Management & Computer Security 15(5), 408-419, 2007. Abstract.

Johnsen, S. O, Hansen, C. W., Line, M. B., Nordby, Y., Rich, E., and Qian Y., "CHECKIT-A Program to Measure and Improve Information Security and Safety Culture", International Journal of Performability Engineering, 3(1), 175-186, 2007. Abstract.

Peer-Reviewed Book Chapters

Andersen, D., Rich, E., and MacDonald, R., "System Dynamics Applications to Public Policy ," Encyclopedia of Complexity and Systems Science, Springer, forthcoming

Martinez-Moyano, I., Rich, E., Conrad, S., “Exploring the Detection Process: Integrating Judgment and Outcome Decomposition”, Lecture Notes in Computer Science, Volume 3975, Pages 701 - 703, Jan 2006

Rich, E. and Duchessi, P., "Keeping the Flame Alive: Sustaining a Successful Knowledge Management Program," in Case Studies in Knowledge Management, M. Jennix, Ed. Hershey, PA, USA: Idea Group, 2005. Reprinted in Knowledge Management: Concepts, Methodologies, Tools and Applications, edited by Dr. Murray E. Jennex, IGI Global, 2007

Miesing, P. and Rich, E., "Using Technology to Experience Ethics in the Business Class", Current Topics in Management, Volume 2, JAI Press. 1997

Peer-Reviewed Conferences

Larsen, K., Nevo., D., and Rich, E. (2008) “Exploring the Semantic Validity of Questionnaire Scales”, Hawaii International Conference on System Sciences (HICSS-41), Big Island, Hawaii, January 2008.

Radianti,. J, Rich, E. and Gonzalez, J. J.. (2007) "Using a Mixed Data Collection Strategy to Uncover Vulnerability Black Markets", 2nd Workshop on Information Security and Privacy (WISP 2007), Montreal, Canada, December 2007.

Rich, E., Nelson, M., and Whitmore, A. (2007) "IT Project Management, Concept Modeling, and Blind Dates", 25th International Conference of the System Dynamics Society, Boston, MA, July 2007. Poster

Rich, E., Sveen, F. O., et al., (2007) "Emergent Vulnerability in Integrated Operations: A Proactive Simulation Study of Risk and Organizational Learning", 40th Hawaii International Conference on System Sciences (Ed, Sprague Jr., R. H.), IEEE Press, Big Island, Hawaii, 2007

Martinez-Moyano, I. J., Rich, E., Conrad, S. H. , Andersen, D. F. , "Modeling the Emergence of Insider Threat Vulnerabilities", Informs Winter Simulation Conference, Monterey, CA, December 2006.

Rich, E., Sveen, F. O., & Jager, M. "Overcoming Organizational Challenges to Secure Knowledge Management", Second Secure Knowledge Management Workshop, Brooklyn, NY, September 2006.

Martinez-Moyano, I. J., E. Rich, et al., "Integrating Judgment and Outcome Decomposition: Exploring Outcome-based Learning Dynamics", 24th International Conference of the System Dynamics Society, Nijmegen, The Netherlands, July 2006.

Rich, E., “Modeling Risk Dynamics in E-Operations Transitions”, ISCRAM-06, Newark, NJ, May, 2006  

Martinez-Moyano, Rich, E., Conrad, S. Exploring the Detection Process: “Integrating Judgment and Outcome Decomposition”, Poster Session, Intelligence and Security Informatics Conference, 2006

Rich, E. and Gonzalez, J. J., "Maintaining Security and Safety in High-threat E-operations Transitions", In 39th Hawaii International Conference on System Sciences (Ed, Sprague Jr., R. H.), IEEE Press, Kauai, Hawaii, 2006.

Rich, E., Martinez-Moyano, I. J., Conrad, S., Cappelli, D. M., Moore, A. P., Shimeall, T. J., Andersen, D. F., Gonzalez, J. J., Ellison, R. J., Lipson, H. F., Mundie, D., Sarriegui, J. M., Sawicka, A., Stewart, T. R., Torres, J. M., Weaver, E. A. and Wiik, J. , "Simulating Insider Cyber-Threat Risks: A Model-Based Case and a Case-Based Model", 23rd International Conference of the System Dynamics Society (Eds, Sterman, J., Repenning, N., Langer, R. S., Rowe, J. I. and Yanni, J. M.) Boston, MA, 2005.

Andersen, D. F. , Cappelli, D. , Gonzalez, .J. J., , Mojtahedzadeh, M., Moore, A. Rich, E., Sarriegui, J. M., , Shimeall, T. J. , Stanton, J., Weaver, E. A., and Zagonel, A. A., "Preliminary System Dynamics Maps of the Insider Cyber-threat Problem", 22nd International Conference of the System Dynamics Society, Oxford, UK., 2004

Rich, E. and Duchessi, P.,"Modeling the sustainability of knowledge management programs", 37th Hawai’i International Conference on System Sciences, Big Island, Hawaii, 2004. Nominated for Best Paper award, Organizational Systems and Technology Track.

Rich, E. and Duchessi, P., "Models for understanding the dynamics of organizational knowledge in consulting firms", 34th Annual Hawaii International Conference on System Sciences, January 3-6,, Maui, Hawaii., 2001

Rich, E. , "Limits to groupware-facilitated organizational learning in a consulting firm," Proceedings of the Sixteenth International Conference of the System Dynamics Society, July 20-23, Quebec City, Canada., 1998

Invited Journal Papers

Gonzalez, J. J., Qian, Y., Sveen, F. O. and Rich, E. "Helping Prevent Information Security Risks in the Transition to Integrated Operations", Telektronikk, 101, pp. 29-37, 2005

Invited Conference Presentations

Rich, E., Conrad, S. and Martinez-Moyano, I. "Insider Threats: Raising the profile and managing the risks", DHS Research and Development Partnerships in Homeland Security Conference, Boston MA, April 2005.

Rich, E., "An emerging perspective on the dynamics of insider cyber-threats", 4th Annual Mathematics and Security of Information Technologies Conference (МаБИТ-04), Moscow State University (МГУ), Moscow, October, 2004 ,

Rich, E., "Using Simulation to Explore the Dynamics of Organizational Knowledge", Proceedings of the 21st International Conference of the System Dynamics Society, New York, NY, 2003. 

Rich, E., "A simulation model of the effects of technology on organizational knowledge", Proceedings of the 1998 Americas Conference, Association for Information Systems, Baltimore, MD, August, 1998

Rich, E. "Limits to groupware-facilitated organizational learning in a consulting firm", Proceedings of the 16th International Conference of the System Dynamics Society, Quebec City, Quebec, CA, July 1998

Project Reports and Other Publications

Rich, E., Andersen, D. F. and Richardson, G. P., OLF-IRMA-AMBASEC Group Modeling Report I, University at Albany, Albany, NY., May 2006.

Rich, E., Andersen, D. F. and Richardson, G. P., OLF-IRMA-AMBASEC Group Modeling Report II, University at Albany, Albany, NY. September 2006.

Martinez-Moyano, I. J. , Rich, E., Conrad, S., Andersen,, D. F., and Stewart, T. R., "A Behavioral Theory of Insider-Threat Risks: A System Dynamics Approach ", Center for Policy Research, University at Albany, 2005.

Dissertation

Rich, E. "Modeling the Dynamics of Organizational Knowledge", Ph.D. Dissertation, University at Albany, 2002.  Abstract as PDF here.  Awarded Distinguished Dissertation Award.