Bishop is interested in cybersecurity and information assurance. His main research area is the analysis of vulnerabilities in computer systems, and he works on countermeasures to protect systems, data sanitization, elections and e-voting systems, policy, formal modeling, the insider threat and computer and information security education. The goals are to better understand why vulnerabilities occur, how they manifest themselves and how they can be ameliorated (or prevented) through both technical and non-technical means. Educating the next generation of computer security experts and computer scientists in general will improve the computing ecosystem, and ultimately the security, reliability and trustworthiness of systems and infrastructure underlying our society.