His core research interests centre around cybersecurity, including advanced persistent threat detection, ransomware classification, and malware analysis. He also has active research programmes in explainable AI (XAI) for security, deception-based security (honeypots), incident handling, safety and security of IoT, security of autonomous vehicles, and human factors in cybersecurity.

He is invested in data sovereignty, co-leading the IndigiCloud project developing community cloud infrastructure for local data governance. His work on everyday user security investigates how to improve the cybersecurity posture of individuals and communities in Aotearoa New Zealand.

He has published over 170 papers, supervised over Masters and PhD students to completion, and serves as Chair of the Australasian Telecommunications and Networking Conference (ATNAC). He is also Co-convenor of the Security Working Group at the Privacy Foundation New Zealand and a governing board member of the International Cybersecurity Data Mining Competition. He helped establish Victoria University of Wellington's Bachelor of Engineering and led the development of the cybersecurity major.