Mikaela Brough

I am a PhD researcher in the Information Security Group at Royal Holloway, University of London, working as part of the EPSRC Centre for Doctoral Training (CDT) in Cyber Security for the Everyday. The CDT is an interdisciplinary doctoral centre for research in cybersecurity, with researchers in cryptography, systems security, and the qualitative/quantitative social sciences.

Research Area

My work explores how members of environmental social movements navigate their information security. To do this, I have taken a multi-sited, engaged ethnographic approach, spanning projects in both the Southern Philippines (PH) and the United Kingdom (UK). This approach involves formal and informal interviews, embedded observation through extended fieldwork, and generally working with participants in ways that they feel benefit them.

I am not alone in the pursuit of ethnography in information security, as I am part of an amazing Ethnography Group. The overall goal of my work is to examine how information security practices within social movements are shaped less by technology itself and more by the social and cultural contexts in which they emerge. More information about projects I am working on is here.

I am supervised by Professor Rikke Bjerg Jensen and Professor Martin Albrecht, an ethnographer and a cryptographer respectively. My doctoral research is affiliated with their EPSRC-funded interdisciplinary project Social Foundations of Cryptography. My work is funded through a EPSRC studentship associated with the CDT.

Current Work

I spent 2023-2024 studying the UK climate movement. My work in the Philippines is a 2 year formal collaboration between myself, local universities in PH and environmental advocacy groups, involving multiple periods of fieldwork. I am currently working on finalising and submitting my thesis.

Etc.

I also like to do things outside my thesis. I recently finished working as a research assistant for a DSIT project about security convergence / emerging technology. I am also a teaching assistant for a few modules, including security management, intro to cryptography and programming/statistics (mostly Python, though I can mess around with R quite well…C and Java less so). During a previous RA stint at the University of Oxford, I worked in other areas of qualitative social research, hence the two publications on family planning.

I completed my MSc in Social Anthropology at the University of Oxford in 2021 under the supervision of Dr. Ina Zharkevich. I have a BA from McGill University. I grew up in southern Ontario, but tend to split my non-fieldwork time between London and southern Italy.

My first language is English and I am also comfortable speaking Italian. I know a standard amount of French (for a Canadian) and have been learning and chatting in Tagalog for almost 2 years now!

Email me!

news

May 09, 2026	Really enjoyed taking part in conversations about ‘At-Compromise Security’ a new security notion derived from ethnographic fieldwork by members of the SFOC team at the Cryptographic Applications Workshop (CAW) and EUROCRYPT 2026 in Rome!
Sep 30, 2025	Had a great time at Privacy Camp 2025, organised by EDRi in Brussels —- great workshops on digital rights in times of rising authoritarianism & EU deregulation.
Aug 15, 2025	Wrapping up three great days at USENIX Security '25, where I presented new work on the UK climate movement. I'm also excited share that this work received an 'Honourable Mention for Best Paper' award!
Aug 08, 2025	New report with DSIT just published online here!
Jun 20, 2025	Wrap on fieldwork in the Philippines for this year! Back in London.

selected publications

USENIX

On the Virtues of Information Security in the UK Climate Movement

Mikaela Brough, Rikke Bjerg Jensen , and Martin R. Albrecht

In Proceedings of the 34th USENIX Security Symposium , 2025

Abs HTML

We report on an ethnographic study with members of the climate movement in the United Kingdom (UK). We conducted participant observation and interviews at protests and in various activist settings. Reporting on the findings as they relate to information security, we show that members of the UK climate movement wrestled with (i) a fundamental tension between openness and secrecy; (ii) tensions between autonomy and collective interdependence in information-security decision-making; (iii) conflicting activist ideals that shape security discourses; and (iv) pressures from different social gazes – from each other, from people outside the movement and from their adversaries. Overall, our findings shed light on the social complexities of information-security research in activist settings and provoke methodological questions about programmes that aim to design for activists.
DSIT

Securing Converged Technologies: Insights from Subject Matter Experts

Andrew Dwyer , and Mikaela Brough

2025

Abs HTML

The convergence of existing and emerging technologies are increasingly reshaping contemporary capabilities of states, organisations, and society with significant risks and opportunities for cyber security. Based on research with 20 subject matter experts primarily from within the cyber security sector, this report examines the role of technology convergence, its impact upon cyber security, and potential policy responses to identifying and mitigating technology convergence in the domain. We present a series of findings on the challenges of identifying technology convergences for cyber security, how technology convergence operates across broader technology ecologies, and how engagement with a range of actors in order to build expert communities is essential to addressing and mitigating the impact of technology convergence for cyber security.