My research focuses on the field of software engineering, more specifically proactive software security and privacy, software architectures and location-based games. My software security research has revolved around software diversification, increasing security with honeypots and other fake entities, intrusion detection, cyber attribution, web application security, IoT security, malicious browser extensions and man-in-the-browser attacks. Software privacy research has concentrated on studying how well applications on web and mobile devices respect GDPR and privacy policies and consequences of potential privacy violations. While my research often focuses on highly technical aspects of software security, I have also carried out many cross-disciplinary studies, for example applying theories of social sciences to software development and mobile games.