Gordon Russell

Gordon Russell is an Associate Professor at Edinburgh Napier University's School of Computing Engineering and the Built Environment, specializing in cybersecurity and digital forensics research. His work focuses on practical security applications for law enforcement and critical infrastructure protection.

His research interests span multiple domains within cybersecurity, with particular emphasis on digital evidence management, ransomware detection, and blockchain applications for forensic investigations. Russell's work bridges theoretical computer science with practical law enforcement needs, developing systems for secure evidence handling and leak attribution. His research group has made significant contributions to industrial control system security and memory-based encryption analysis.

Russell's recent publications demonstrate a strong focus on practical digital forensics applications, particularly in blockchain-based evidence management systems and forensic watermarking techniques. His work shows consistent development from foundational computer architecture research in the 1990s to contemporary cybersecurity applications, with a clear trajectory toward solving real-world security challenges for law enforcement agencies and critical infrastructure providers.

Russell has secured multiple research grants totaling over £300,000 from organizations including Innovate UK, Scottish Enterprise, and The Scottish Informatics & Computer Science Alliance. His research projects include MEMCRYPT (focused on ransomware detection), vSOC (Virtualized Security Operations Centre), and evidence management frameworks for law enforcement.

• MEMCRYPT CyberASAP Phase 2 (2020-2021, £52,310, Innovate UK)
• Memcrypt (HGSP) (2020-2021, £109,883, Scottish Enterprise)
• MemCrypt (2020, £31,930, Innovate UK)
• MemoryCrypt (2019-2020, £10,759, SICSA)
• vSOC - Virtualised Security Operations Centre (2015-2017, £39,268, Advance HE)

As an academic supervisor, Russell has mentored numerous doctoral candidates, serving as primary or secondary supervisor for research in digital forensics, ransomware detection, and evidence management systems. His students' work often focuses on practical applications of cybersecurity research for law enforcement and critical infrastructure protection.