![Yulia Cherdantseva](https://profiles-cardiff.imgix.net/attachments/9029?w=200&h=200&auto=format&crop=faces&fit=crop&q=90")
Dr Yulia Cherdantseva
(hi/ei)
- Ar gael fel goruchwyliwr ôl-raddedig
Timau a rolau for Yulia Cherdantseva
Darllenydd mewn Systemau Diogelwch a Gwybodaeth Seiber
Academaidd
Trosolwyg
Mae Dr Yulia Cherdantseva yn Ddarllenydd yn yr Ysgol Cyfrifiadureg a Gwybodeg ym Mhrifysgol Caerdydd. Hi yw Cyfarwyddwr Canolfan Ragoriaeth Academaidd mewn Addysg Seiberddiogelwch (ACE-CSE) Prifysgol Caerdydd.
Mae Dr Cherdantseva yn gyd-gyfarwyddwr y Sefydliad Arloesi Prifysgol Trawsnewid Digidol (DTUII) ochr yn ochr â'r Athro Pete Burnap (COMSC) a'r Athro Tim Edwards (CARBS).
Mae Dr Cherdantseva yn aelod o Fwrdd Gweithredol / Golygyddol prosiect CyBOK , prosiect cenedlaethol a ariennir gan y Rhaglen Seiberddiogelwch Genedlaethol sy'n canolbwyntio ar godio'r wybodaeth seiberddiogelwch.
Mae Dr Cherdantseva yn aelod gweithgar o Ganolfan Ymchwil Seiberddiogelwch Caerdydd, sy'n cael ei chydnabod gan NCSC ac EPSRC fel Canolfan Ragoriaeth Academaidd mewn Ymchwil Seiberddiogelwch. Yn 2015-2016, bu'n gweithio fel ymchwilydd arweiniol ar y prosiect "Rheoli Goruchwylio a Chaffael Data Systemau Seiberddiogelwch Bywyd Seiberddiogelwch (SCADA-CSL)" a ariannwyd gan Grŵp Airbus Endeavr Cymru a Llywodraeth Cynulliad Cymru, lle datblygodd estyniad graffigol newydd SCADA Seiberddiogelwch, Diogelwch a Risg (SCADA CSSR) ar gyfer BPMN 2.0 a model dibyniaeth ffurfweddadwy o system SCADA. Yn 2020-2021, arweiniodd brosiect a ariannwyd gan NCSC a RISCS, a oedd yn canolbwyntio ar wneud penderfyniadau seiberddiogelwch ar gyfer BBaChau a arweiniodd at ddatblygu'r Canllaw Arfer Gorau i BBaChau mewn Gwneud Penderfyniadau Buddsoddi Seiberddiogelwch (ar gael yn Gymraeg a Saesneg). Yn 2021, dyfarnwyd grant EPSRC iddi ar gyfer datblygu fframwaith ar gyfer llyfrau chwarae seiberddiogelwch gwybodus a chyfoethog metrig ar gyfer gwella gwytnwch CNI. Mae prototeip yr offeryn a ddatblygwyd yn y prosiect hwn sy'n cefnogi dyluniad llyfrau chwarae seiberddiogelwch ar gael i'w hadolygu gan y cyhoedd.
Mae gan Dr Cherdantseva ddiddordeb gweithredol mewn addysg a hyfforddiant seiberddiogelwch ar bob lefel - ysgolion uwchradd, rhaglenni gradd israddedig ac ôl-raddedig, prosiectau ymchwil PhD a chyrsiau Datblygiad Proffesiynol Parhaus – mae hi wedi bod yn cymryd rhan ac yn arwain mentrau ar draws yr holl lefelau hyn. Mae Dr Cherdantseva yn angerddol am gydraddoldeb, amrywiaeth a chynhwysiant ym maes seiberddiogelwch – mae'n aelod o Bwyllgor Llywio'r CIISec, "Women in Cyber" ac o weithgor CREST ar Amrywiaeth. Mae cyhoeddiadau diweddar ar EDI mewn seiber yn cynnwys 'How you can help more women study cyber security' yn SC Magazine a 'More Women in Cyber Security: The Whys and the Hows' yng nghylchgrawn CIISec's Pulse (2020).
Cyhoeddiad
2026
- Alotaibi, M. , Cherdantseva, Y. and Teehan, C. 2026. Methodology for designing and developing a cybersecurity curriculum for secondary schools. Presented at: 7th International Conference on Blockchain Computing and Applications (BCCA) Durbovnic, Croatia 14-17 October 2025. 2025 7th International Conference on Blockchain Computing and Applications (BCCA). IEEE. , pp.926-934. (10.1109/BCCA66705.2025.11227168)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Beyond the automation gap: a survey on continuous compliance audit for IoT security. Computers and Security 168 104953. (10.1016/j.cose.2026.104953)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Systematization of human-centered continuous audit for IoT security compliance. Journal of Cybersecurity 12 (1) tyag021. (10.1093/cybsec/tyag021)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Towards responsible AI for IoT network security auditing using knowledge graph and RAGAS. Journal of Cybersecurity and Privacy 6 (3) 98. (10.3390/jcp6030098)
- Maynard, P. et al. 2026. Consistent and compatible modelling of cyber intrusions and incident response demonstrated in the context of malware attacks on critical infrastructure. Journal of Cybersecurity and Privacy 6 (4) 109. (10.3390/jcp6040109)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Enhancing cybersecurity log analysis through Retrieval-Augmented Generation. Presented at: 3rd International Conference on Foundation and Large Language Model (FLLM) Vienna, Austria 25-28 November 2025. IEEE. , pp.990-995. (10.1109/FLLM67465.2025.11390888)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Physical tells digital threats: supervised ML-IDS for multimodal IoT telemetry in smart buildings. Presented at: International Conference on Cryptography, Informatics, and Cybersecurity 2025 Depok, Indonesia 22-23 October, 2025. (10.1109/icocics68032.2025.11384090)
2025
- Briliyant, O. et al. 2025. Federated learning for collaborative cyber-attack detection in Internet of Vehicles (IoV) network. Presented at: 8th International Conference on Advanced Communication Technologies and Networking (CommNet) Rabat, Morocco 3-5 December 2025. 2025 8th International Conference on Advanced Communication Technologies and Networking (CommNet). IEEE. (10.1109/CommNet68224.2025.11288882)
- Song, R. et al. 2025. Digital roads and data ethics: Exploring the road users’ perspective. Transportation Research Part F: Traffic Psychology and Behaviour 115 103330. (10.1016/j.trf.2025.103330)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2025. Network packet security analysis chatbot using SQL-RAG approach and cybersecurity-tuned LLM. Presented at: 6th International Conference on Electrical, Communication and Computer Engineering (ICECCE) Istanbul, Turkey 27-28 August 2025. 2025 International Conference on Electrical, Communication and Computer Engineering (ICECCE). IEEE. (10.1109/ICECCE67514.2025.11258026)
- Alotaibi, M. et al. 2025. Empowering youth in the digital age with cyber security education. Journal of The Colloquium for Information Systems Security Education 12 (1)(10.53735/cisse.v12i1.203)
2024
- Alotaibi, M. et al. 2024. Enhancing cybersecurity education in secondary schools: A CyBOK-based analysis and strategic approach. Presented at: INTED2024 conference Valencia, Spain 4-6 March 2024. INTED2024 Proceedings. International Technology, Education and Development Conference Vol. 18. Valencia: IATED. , pp.5096-5104. (10.21125/inted.2024.1319)
- Williams, L. et al. 2024. Leveraging gamification and game-based learning in cybersecurity education: Engaging and inspiring non-cyber students. Journal of The Colloquium for Information Systems Security Education 11 (1)(10.53735/cisse.v11i1.186)
2023
- Shaked, A. et al. 2023. Operations-informed incident response playbooks. Computers and Security 134 103454. (10.1016/j.cose.2023.103454)
- Agyepong, E. et al. 2023. A systematic method for measuring the performance of a cyber security operations centre analyst. Computers and Security 124 102959. (10.1016/j.cose.2022.102959)
2022
- Shaked, A. , Cherdantseva, Y. and Burnap, P. 2022. Model-based incident response playbooks. Presented at: 17th International Conference on Availability, Reliability and Security Vienna, Austia 23-26 August 2022. ARES '22: Proceedings of the 17th International Conference on Availability, Reliability and Security. ACM. , pp.1-7. (10.1145/3538969.3538976)
- Cherdantseva, Y. et al. 2022. A configurable dependency model of a SCADA system for goal-oriented risk assessment. Applied Sciences 12 (10) 4880. (10.3390/app12104880)
2020
- Agyepong, E. et al. 2020. Towards a framework for measuring the performance of a security operations center analyst. Presented at: IEEE International Conference on Cyber Security and Protection of Digital Services (Cyber Security 2020) Dublin, Ireland 15-17 June 2020. Proceedings of the International Conference on Cyber Security and Protection of Digital Services. IEEE. , pp.1-8. (10.1109/CyberSecurity49315.2020.9138872)
- Agyepong, E. et al. 2020. Cyber security operations centre concepts and implementation. In: Yaokumah, W. et al., Modern Theories and Practices for Cyber Ethics and Security Compliance. IGI Global. , pp.88-104. (10.4018/978-1-7998-3149-5.ch006)
- Agyepong, E. et al. 2020. Challenges and performance metrics for security operations center analysts: a systematic review. Journal of Cyber Security Technology 4 (3), pp.125-152. (10.1080/23742917.2019.1698178)
2018
- De Ribaupierre, H. et al. 2018. Towards gender equality in software engineering: the NSA approach. Presented at: GE’18:IEEE/ACM 1st International Workshop on Gender Equality in Software Engineering Gothenburg, Sweden 28 May 2018. GE’18: GE’18:IEEE/ACM 1st International Workshop on Gender Equality in Software Engineering. New York: ACM. , pp.10-13. (10.1145/3195570.3195579)
2017
- Eden, P. et al., 2017. SCADA system forensic analysis within IIoT. In: Thames, L. and Schaefer, D. eds. Cybersecurity for Industry 4.0: Analysis for Design and Manufacturing. Springer Series in Advanced Manufacturing , pp.73-101. (10.1007/978-3-319-50660-9_4)
- Burnap, P. et al. 2017. Determining and sharing risk data in distributed interdependent systems. IEEE Computer 50 (4), pp.72-79. (10.1109/MC.2017.108)
2016
- Cherdantseva, Y. et al. 2016. A multifaceted evaluation of the reference model of information assurance and security. Computers and Security 63 , pp.45-66. (10.1016/j.cose.2016.09.007)
- Cherdantseva, Y. et al. 2016. A review of cyber security risk assessment methods for SCADA systems. Computers and Security 56 , pp.1-27. (10.1016/j.cose.2015.09.009)
- Eden, P. et al., 2016. Forensic readiness for SCADA/ICS incident response. Presented at: 4th International Symposium for ICS & SCADA Cyber Security Research Queen's University Belfast, Belfast, UK 23-25 August 2016.
2015
- Eden, P. et al., 2015. A cyber forensic taxonomy for SCADA systems in critical infrastructure. Presented at: The 10th International Conference on Critical Information Infrastructures Security 2015 (CRITIS 2015) Berlin, Germany 5-7 October 2015.
2014
- Cherdantseva, Y. 2014. Secure*BPMN - a graphical extension for BPMN 2.0 based on a reference model of information assurance & security. PhD Thesis , Cardiff University.
2012
- Cherdantseva, Y. , Hilton, J. C. and Rana, O. F. 2012. Towards SecureBPMN - Aligning BPMN with the information assurance and security domain. Presented at: 4th International Workshop, BPMN 2012, Vienna, Austria 12-13 September 2012. Published in: Mendling, J. and Weidlich, M. eds. Business Process Model and Notation: 4th International Workshop, BPMN 2012, Vienna, Austria, September 12-13, 2012. Proceedings. Vol. 125.Lecture Notes in Business Information Processing Springer. , pp.107-115. (10.1007/978-3-642-33155-8_9)
Adrannau llyfrau
- Agyepong, E. et al. 2020. Cyber security operations centre concepts and implementation. In: Yaokumah, W. et al., Modern Theories and Practices for Cyber Ethics and Security Compliance. IGI Global. , pp.88-104. (10.4018/978-1-7998-3149-5.ch006)
- Eden, P. et al., 2017. SCADA system forensic analysis within IIoT. In: Thames, L. and Schaefer, D. eds. Cybersecurity for Industry 4.0: Analysis for Design and Manufacturing. Springer Series in Advanced Manufacturing , pp.73-101. (10.1007/978-3-319-50660-9_4)
Cynadleddau
- Alotaibi, M. , Cherdantseva, Y. and Teehan, C. 2026. Methodology for designing and developing a cybersecurity curriculum for secondary schools. Presented at: 7th International Conference on Blockchain Computing and Applications (BCCA) Durbovnic, Croatia 14-17 October 2025. 2025 7th International Conference on Blockchain Computing and Applications (BCCA). IEEE. , pp.926-934. (10.1109/BCCA66705.2025.11227168)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Enhancing cybersecurity log analysis through Retrieval-Augmented Generation. Presented at: 3rd International Conference on Foundation and Large Language Model (FLLM) Vienna, Austria 25-28 November 2025. IEEE. , pp.990-995. (10.1109/FLLM67465.2025.11390888)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Physical tells digital threats: supervised ML-IDS for multimodal IoT telemetry in smart buildings. Presented at: International Conference on Cryptography, Informatics, and Cybersecurity 2025 Depok, Indonesia 22-23 October, 2025. (10.1109/icocics68032.2025.11384090)
- Briliyant, O. et al. 2025. Federated learning for collaborative cyber-attack detection in Internet of Vehicles (IoV) network. Presented at: 8th International Conference on Advanced Communication Technologies and Networking (CommNet) Rabat, Morocco 3-5 December 2025. 2025 8th International Conference on Advanced Communication Technologies and Networking (CommNet). IEEE. (10.1109/CommNet68224.2025.11288882)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2025. Network packet security analysis chatbot using SQL-RAG approach and cybersecurity-tuned LLM. Presented at: 6th International Conference on Electrical, Communication and Computer Engineering (ICECCE) Istanbul, Turkey 27-28 August 2025. 2025 International Conference on Electrical, Communication and Computer Engineering (ICECCE). IEEE. (10.1109/ICECCE67514.2025.11258026)
- Alotaibi, M. et al. 2024. Enhancing cybersecurity education in secondary schools: A CyBOK-based analysis and strategic approach. Presented at: INTED2024 conference Valencia, Spain 4-6 March 2024. INTED2024 Proceedings. International Technology, Education and Development Conference Vol. 18. Valencia: IATED. , pp.5096-5104. (10.21125/inted.2024.1319)
- Shaked, A. , Cherdantseva, Y. and Burnap, P. 2022. Model-based incident response playbooks. Presented at: 17th International Conference on Availability, Reliability and Security Vienna, Austia 23-26 August 2022. ARES '22: Proceedings of the 17th International Conference on Availability, Reliability and Security. ACM. , pp.1-7. (10.1145/3538969.3538976)
- Agyepong, E. et al. 2020. Towards a framework for measuring the performance of a security operations center analyst. Presented at: IEEE International Conference on Cyber Security and Protection of Digital Services (Cyber Security 2020) Dublin, Ireland 15-17 June 2020. Proceedings of the International Conference on Cyber Security and Protection of Digital Services. IEEE. , pp.1-8. (10.1109/CyberSecurity49315.2020.9138872)
- De Ribaupierre, H. et al. 2018. Towards gender equality in software engineering: the NSA approach. Presented at: GE’18:IEEE/ACM 1st International Workshop on Gender Equality in Software Engineering Gothenburg, Sweden 28 May 2018. GE’18: GE’18:IEEE/ACM 1st International Workshop on Gender Equality in Software Engineering. New York: ACM. , pp.10-13. (10.1145/3195570.3195579)
- Eden, P. et al., 2016. Forensic readiness for SCADA/ICS incident response. Presented at: 4th International Symposium for ICS & SCADA Cyber Security Research Queen's University Belfast, Belfast, UK 23-25 August 2016.
- Eden, P. et al., 2015. A cyber forensic taxonomy for SCADA systems in critical infrastructure. Presented at: The 10th International Conference on Critical Information Infrastructures Security 2015 (CRITIS 2015) Berlin, Germany 5-7 October 2015.
- Cherdantseva, Y. , Hilton, J. C. and Rana, O. F. 2012. Towards SecureBPMN - Aligning BPMN with the information assurance and security domain. Presented at: 4th International Workshop, BPMN 2012, Vienna, Austria 12-13 September 2012. Published in: Mendling, J. and Weidlich, M. eds. Business Process Model and Notation: 4th International Workshop, BPMN 2012, Vienna, Austria, September 12-13, 2012. Proceedings. Vol. 125.Lecture Notes in Business Information Processing Springer. , pp.107-115. (10.1007/978-3-642-33155-8_9)
Erthyglau
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Beyond the automation gap: a survey on continuous compliance audit for IoT security. Computers and Security 168 104953. (10.1016/j.cose.2026.104953)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Systematization of human-centered continuous audit for IoT security compliance. Journal of Cybersecurity 12 (1) tyag021. (10.1093/cybsec/tyag021)
- Briliyant, O. , Javed, A. and Cherdantseva, Y. 2026. Towards responsible AI for IoT network security auditing using knowledge graph and RAGAS. Journal of Cybersecurity and Privacy 6 (3) 98. (10.3390/jcp6030098)
- Maynard, P. et al. 2026. Consistent and compatible modelling of cyber intrusions and incident response demonstrated in the context of malware attacks on critical infrastructure. Journal of Cybersecurity and Privacy 6 (4) 109. (10.3390/jcp6040109)
- Song, R. et al. 2025. Digital roads and data ethics: Exploring the road users’ perspective. Transportation Research Part F: Traffic Psychology and Behaviour 115 103330. (10.1016/j.trf.2025.103330)
- Alotaibi, M. et al. 2025. Empowering youth in the digital age with cyber security education. Journal of The Colloquium for Information Systems Security Education 12 (1)(10.53735/cisse.v12i1.203)
- Williams, L. et al. 2024. Leveraging gamification and game-based learning in cybersecurity education: Engaging and inspiring non-cyber students. Journal of The Colloquium for Information Systems Security Education 11 (1)(10.53735/cisse.v11i1.186)
- Shaked, A. et al. 2023. Operations-informed incident response playbooks. Computers and Security 134 103454. (10.1016/j.cose.2023.103454)
- Agyepong, E. et al. 2023. A systematic method for measuring the performance of a cyber security operations centre analyst. Computers and Security 124 102959. (10.1016/j.cose.2022.102959)
- Cherdantseva, Y. et al. 2022. A configurable dependency model of a SCADA system for goal-oriented risk assessment. Applied Sciences 12 (10) 4880. (10.3390/app12104880)
- Agyepong, E. et al. 2020. Challenges and performance metrics for security operations center analysts: a systematic review. Journal of Cyber Security Technology 4 (3), pp.125-152. (10.1080/23742917.2019.1698178)
- Burnap, P. et al. 2017. Determining and sharing risk data in distributed interdependent systems. IEEE Computer 50 (4), pp.72-79. (10.1109/MC.2017.108)
- Cherdantseva, Y. et al. 2016. A multifaceted evaluation of the reference model of information assurance and security. Computers and Security 63 , pp.45-66. (10.1016/j.cose.2016.09.007)
- Cherdantseva, Y. et al. 2016. A review of cyber security risk assessment methods for SCADA systems. Computers and Security 56 , pp.1-27. (10.1016/j.cose.2015.09.009)
Gosodiad
- Cherdantseva, Y. 2014. Secure*BPMN - a graphical extension for BPMN 2.0 based on a reference model of information assurance & security. PhD Thesis , Cardiff University.
Ymchwil
Research Interests
My main research interest is in the design of secure information systems. More specifically, I am interested in the modelling of secure intra- and inter-organisational business processes. I also research SCADA/ICS cyber security and risk assessment methodologies.
My other research interests are:
- Conceptual and Reference Models of Information Security and Information Assurance
- Evolution of Conceptual and Reference Models of Information Security/Assurance
- Definitions of Information Security/Assurance
- Business Process Modelling (BPMN, UML, IDEF)
- Complex Inter-Organisational Business Processes
- Incorporation of Security, Safety and Risk information into Business Process Models
- Cyber Security in SCADA and ICS systems
Addysgu
Teaching Duties
I am not teaching at the moment, but I have been enjoying teaching in 2010-2014, when I assisted with the following modules:
- CMT602 - SQL
- CMO1102 - Web Applications
- CMO240 - System Design (Group Project)
- CMO206 - Software Engineering
- CMO383 - Management Decision Making
- CMO381 - Information Assurance
Bywgraffiad
EDUCATION
- PhD in Computer Science & Informatics, Cardiff University, UK
- MSc (Hons) in Business Information Systems Design, Russia
Anrhydeddau a dyfarniadau
- PhD scholarship from the School of Computer Science & Informatics, Cardiff University, 2010 -2014
Meysydd goruchwyliaeth
Mr Enoch Agyepong
Mrs Maha Aloitabi
Miss Iryna Bernyk
Mr Obrina Briliyant
