Chapter 8 — Defense and publication plan
Lesson map
Lesson 08 published. Map, example, EX045.
flowchart TD
N0["Learning outcomes"]
N1["8.1 Preparing the defense"]
N2["8.2 Anticipated questions"]
N3["8.3 Publication plan"]
N4["8.4 Closing the partnership"]
N5["8.5 After the defense"]
N6["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6
N6 --> EX["Worked example"]
EX --> Q["Exercise EX045"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["8.1 Preparing the defense"]
N2["8.2 Anticipated questions"]
N3["8.3 Publication plan"]
N4["8.4 Closing the partnership"]
N5["8.5 After the defense"]
N6["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6 --> Q["EX045"]
[Learning outcomes]
|
v
[8.1 Preparing the defense]
|
v
[8.2 Anticipated questions]
|
v
[8.3 Publication plan]
|
v
[8.4 Closing the partnership]
|
v
[8.5 After the defense]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX045]
Learning outcomes
You will (1) prepare for the defense; (2) answer likely questions with evidence; (3) plan publication and closure of the partnership.
8.1 Preparing the defense
Rhea rereads the whole thesis, lists its weakest points and prepares a short, evidence-based answer for each. She drafts a fifteen-minute opening that states the question, design, main findings, limits and contribution. A mock defense with two colleagues playing examiners exposes answers that are too long or vague. She practises saying I do not know where that is honest, followed by how the question could be answered. Preparation is about understanding her own work deeply enough to discuss it calmly from any angle, not memorising scripts.
8.2 Anticipated questions
Likely questions include why ninety days defines dormancy, how usage logs miss access, whether three public bodies generalise, why units rather than individuals were randomised, and what the third partner's weaker correlation means. For each, Rhea notes the relevant page, data and limitation. She also prepares for a broader question: if she started again, what would she change? Her honest answer, a longer study with two review cycles to measure whether excess grows back, shows she understands the limits of a single cycle and points naturally to future work.
8.3 Publication plan
Rhea plans two papers: one on the codebook and complexity relationship, one on the randomised review comparison. She chooses venues that publish empirical security and usable security research, checks that the data agreement permits each paper, and gives partners the chance to review drafts for identifying details. The codebook, procedure and synthetic data are released with the papers so other researchers can replicate or extend the work. She also writes a short practitioner summary, because the people who run access reviews rarely read academic papers.
8.4 Closing the partnership
After the defense and corrections, Rhea closes her obligations. Partner exports are deleted on the agreed date and deletion is confirmed in writing. Each partner receives a summary of findings for their own organisation, with recommendations such as focusing reviews on units with complex role models and adopting the structured review. Interview participants receive a plain-language summary. Closing carefully maintains trust between the university and the partners, which matters for future students, and completes the ethical commitments she made at the start of the study.
8.5 After the defense
Rhea makes the corrections the examiners require, records each change and submits the final thesis. She reflects on lessons for future research: securing usage data earlier, planning for two review cycles and budgeting more time for plain-language descriptions. She shares these lessons with her supervisor's group, where new students are starting related projects. Her final contribution is not only the findings but a reusable method, a codebook with known agreement, a tested review procedure and an archive, that others can build on to study least privilege in practice.
Worked example
Rhea prepares a fifteen-minute opening and evidence-based answers, plans two papers with open materials, closes the partnership with confirmed deletion and summaries, and records lessons for future students.
Synthetic case. Rhea, examiners, papers and partners are synthetic.
Errors and limits
Preparing scripted answers instead of understanding the work leaves a candidate unable to handle unexpected questions.
Exercises
- EX045 — Opening contents. What should the fifteen-minute opening state? Rubric: 3 = question, design, findings, limits, contribution;; 2 = most;; 1 = one;; 0 = none.
- EX046 — Honest unknown. How should Rhea handle a question she cannot answer? Rubric: 3 = say so honestly and explain how it could be answered;; 2 = admit;; 1 = guess;; 0 = none.
- EX047 — Restart answer. What would Rhea change if starting again? Rubric: 3 = longer study, two cycles to see if excess grows back;; 2 = longer;; 1 = vague;; 0 = none.
- EX048 — Paper split. What are Rhea's two planned papers? Rubric: 3 = codebook and complexity; randomised review comparison;; 2 = two topics;; 1 = one;; 0 = none.
- EX049 — Deletion confirmation. How is partner data handled at closure? Rubric: 3 = deleted on agreed date, confirmed in writing;; 2 = deleted;; 1 = kept;; 0 = none.
- EX050 — Reusable method. Name the reusable parts of Rhea's method. Rubric: 3 = codebook, procedure, archive;; 2 = two;; 1 = one;; 0 = none.
Synthesis
A good defense rests on deep understanding of one's own evidence, and a careful close keeps faith with partners and participants.
Continue studying — chapter 08 of 08
← Chapter 07 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →