About
I carry out applied research in the challenges for management and use of complex IT systems and infrastructures.
I have a specific interest in aspects related to security, trustworthiness and trust, and risk assessment and management, as well as a broader interest in aspects such as performance engineering, QoS and QoE.
I usually use model-based approaches to obtain predictions or derive management procedures.
Right now I am focusing on automated cyber security risk assessment and management.
Research
Research groups
Research interests
- Computer Networks Security
- Automated cyber security risk assessment and management
Research projects
Completed projects
Publications
Biography
Prof Mike Surridge gained his PhD in Theoretical Physics at Southampton in 1986, worked at the University of Amsterdam Institute for Theoretical Physics before returning to Southampton to work in the field of Computer Science at the Parallel Application Centre which later became the IT Innovation Centre.
His focus for the first 15 years was in parallel high performance computing systems, architectures with a particular interest in programming models, performance engineering and applications. He contributed to the efforts from the late 1980s through the 1990s to port commercially important applications to run on parallel computers, including well known codes such as MSc/Nastran. This led to an engagement with cluster and wide area network computing and the computational Grid, and coordination of the EU GRIA project which demonstrated a web service infrastructure for B2B resource sharing, featuring a fully decentralised yet fine grained trust model and many features now associated with modern cloud computing architectures. Work on the Grid led in due course to an interest in information security, and an engagement in the development and promotion of secure systems and operational policies for the UK E-Science programme.
Today, he is still interested in related areas of business models, trust models, security and risk management in advanced dynamic multi-stakeholder ICT systems including cloud-based, 5G and IoT enabled applications. He was a co-founder of the EC/NESSI Software and Services Trust and Security Working Group, chairing it for many years, was a member of the EC Future Internet Architecture Board established to provide technical input to the Future Internet PPP, and the Vision and Societal Challenges Working Group of the 5G PPP initiative. He coordinated FP7 ICT-SEC SERSCIS (dynamic SOAs for critical infrastructure protection), led work on the development of model-based analysis of trust and trustworthiness in FP7 ICT OPTET and H2020 5G-ENSURE, and on model-based regulatory compliance by design in Innovate UK ASSURED (security assurance for access to the National Health Service network), and led work at Southampton on model-based security risk analysis and data protection in H2020 RESTASSURED, H2020 SHIELD and H2020 ProTego, FogProtect and CyberKit4SME. He provides advice on SOAs, business models and security to several other projects, and is part of the GCHQ Academic Centre of Excellence in Cyber Security at the University of Southampton, and of the industry funded University of Southampton Cyber Security Academy. He has published approaching 100 scientific papers.