Stuart Madnick

About

Stuart Madnick is the John Norris Maguire Professor of Information Technology at the MIT Sloan School of Management. He is also an Affiliate Faculty member at the MIT Institute for Data, Systems, and Society (IDSS) and the Founding Director of Cybersecurity at MIT Sloan, where he leads the Cybersecurity at MIT Sloan Initiative, formerly known as the Interdisciplinary Consortium for Improving Critical Infrastructure Cybersecurity (IC)3. Madnick’s involvement in cybersecurity research dates back to 1979, when he coauthored the book 'Computer Security'. He holds a PhD in computer science from MIT and has been a faculty member there since 1972. He served as the head of MIT's Information Technology Group in the Sloan School of Management for over 20 years. His research interests include cybersecurity, Big Data, semantic connectivity, database technology, software project management, and the strategic use of information technology. Madnick has authored or coauthored more than 300 books, articles, and reports, and has served as a consultant to major corporations. He is also a cofounder of five high-tech firms and currently operates the 14th-century Langley Castle Hotel in England.

Research topics

• Computer Security
• Computer Science
• Political Science
• Business
• Database
• Law
• Internet privacy
• Economics
• Law and economics
• Finance

Selected publications

• A Systematic Analysis of the Capital One Data Breach: Critical Lessons Learned

  ACM Transactions on Privacy and Security · 2022-07-07 · 56 citations

  articleOpen accessSenior author

  The 2019 Capital One data breach was one of the largest data breaches impacting the privacy and security of personal information of over a 100 million individuals. In most reports about a cyberattack, you will often hear that it succeeded because a single employee clicked on a link in a phishing email or forgot to patch some software, making it seem like an isolated, one-off, trivial problem involving maybe one person, committing a mistake or being negligent. But that is usually not the complete…

  PublisherOA PDFDOI

• Developing a Global Data Breach Database and the Challenges Encountered

  Journal of Data and Information Quality · 2021 · 54 citations

  If the mantra “data is the new oil” of our digital economy is correct, then data leak incidents are the critical disasters in the online society. The initial goal of our research was to present a comprehensive database of data breaches of personal information that took place in 2018 and 2019. This information was to be drawn from press reports, industry studies, and reports from regulatory agencies across the world. This article identified the top 430 largest data breach incidents among more tha…

  PublisherOA PDFDOI

• A Case Study of the Capital One Data Breach

  SSRN Electronic Journal · 2020 · 32 citations

  DOI

• Cybersafety: A System-Theoretic Approach to Identify Cyber-Vulnerabilities & Mitigation Requirements in Industrial Control Systems

  IEEE Transactions on Dependable and Secure Computing · 2021-06-29 · 24 citations

  articleOpen accessSenior author

  Recent cyber-physical attacks, such as <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Stuxnet, Triton</i> etc., have invoked an ominous realization about the vulnerability of critical infrastructure, including water, power and gas distribution systems. Traditional IT security-biased protection methods that focus on improving <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cyber hygiene</i> are la…

  PublisherOA PDFDOI

• The evolution of global cybersecurity norms in the digital age: A longitudinal study of the cybersecurity norm development process

  Information Security Journal A Global Perspective · 2023-04-21 · 18 citations

  articleOpen accessSenior author

  Developing cybersecurity norms and global normative cybersecurity behaviors play an increasingly critical role in global cybersecurity governance. This paper takes a longitudinal approach to analyze cybersecurity norms development activities during the period 1997–2020. A total of 206 individual cases were collected, and 233 individual cybersecurity norms were identified and compiled into 25 subject categories. Categorizing the norm subjects alongside the frequency of cases and norms identified…

  PublisherDOI

Frequent coauthors

• Michael Siegel

  Tufts University

  112 shared

• Hongwei Zhu

  University of Massachusetts Lowell

  63 shared

• Nazli Choucri

  43 shared

• Allen Moulton

  39 shared

• Wei Lee Woon

  Expedia Group (United States)

  31 shared

• Aykut Firat

  23 shared

• Keman Huang

  Renmin University of China

  17 shared

• Tarek K. Abdel‐Hamid

  16 shared

Labs

• MIT Initiative on the Digital EconomyPI

Education

• PhD, Cmputer Science

  Massachusetts Institute of Technology

  1972

• MBA, Sloan School of Management

  Massachusetts Institute of Technology

  1972

• MS, Electrical Engineering & Computer Science

  Massachusetts Institute of Technology

  1969

• BS, Electrical Engineering

  Massachusetts Institute of Technology

  1966

Awards & honors

• 2025 Best Conference Paper Award from the International Asso…
• 2024 Association for Information Systems (AIS) Best Informat…
• 2022 Best Paper Award from the IEEE Open Access Journal of P…
• 2021 Best Paper Award from the International Association for…

Similar researchers at Massachusetts Institute of Technology

• Wanda Orlikowskih-70
• Thomas W. Maloneh-60
• Sinan Aralh-44