Michel van Eeten

Michel van Eeten is Professor of Cybersecurity Governance in the Department of Organisation and Governance at Delft University of Technology's Faculty of Technology, Policy and Management. His research examines the interplay between technological design and economic incentives in Internet security, with empirical studies funded by the Dutch National Police, European Commission, U.S. Department of Homeland Security, OECD, ITU, and multiple Dutch ministries. He served on the Dutch Cyber Security Council (2011-2023), advising the national government on cybersecurity policy.

His research spans cybersecurity governance, malware economics, threat intelligence sharing, and IoT security remediation. Van Eeten employs empirical methods to analyze real-world security data, focusing on how market incentives and regulatory frameworks shape security outcomes. Key investigations include botnet cleanup efficacy, vulnerability information filtering by organizations, and the role of network operators in security infrastructure.

Recent publications reveal a shift toward human-organizational dimensions of security, analyzing vulnerability management workflows and threat intelligence community impacts. His work increasingly combines technical measurement with policy analysis, emphasizing evidence-based interventions like randomized control trials for security protocols and cross-sector remediation efforts.

Scientific Awards:

• NDSS 2019 Distinguished Paper Award for "Cleaning Up the Internet of Evil Things: Real-World Evidence on ISP and Consumer Efforts to Remove Mirai"

Van Eeten has supervised 10 students and secured major grants from Dutch government agencies, EU bodies, and international organizations. His Cybersecurity (TPM) thematic collaboration involves 25+ researchers across public-private partnerships, including ongoing projects with national police and intelligence services.

He leads a dedicated research team within TU Delft's Faculty of Technology, Policy and Management that conducts large-scale empirical studies on Internet security governance, collaborating with Dutch ministries, banks, and international bodies like the OECD to translate research into policy frameworks.