Aditya published a paper about the Casual Inference for Cyber Security in ACSAC conference
In this work, he proposes a causal inference based approach to understand the influence of security control on patching behaviour in the organisations. https://www.acsac.org/2020/program/papers/