2025 CyLab Partners Conference

October 28-29, 2025

8:00 a.m. - 5:00 p.m. ET

IN PERSON AT CARNEGIE MELLON UNIVERSITY

  • Photo of Lorrie Cranor speaking to attendees of the CyLab Partners Conference
  • Photo of Assane Gueye lecturing at the CyLab Partners Conference
  • Photo of Ian McCormack presenting his research poster at the CyLab Partners Conference

    • We are pleased to announce the 2025 CyLab Partners Conference!

    All main events and presentations were held on the Carnegie Mellon University Campus in the Rangos Ballroom at the Jared L. Cohon University Center.

    The CyLab Annual Partners Conference highlights the latest research in security and privacy with an interactive forum between faculty, students, and industry. We are excited to welcome our guests back to campus for this year’s two-day event, which will include more than 30 faculty and student presentations. All sessions will consist of brief talks, followed by active dialogue with our attendees.

    Attendance is limited to invited guests, representatives of CyLab's partners, and CMU CyLab faculty, staff, and students.

    If you have any questions regarding the 2025 CyLab Partners Conference, please contact Isabelle Glassmith at iglassmi@andrew.cmu.edu.

    For information on hotels and transportation please see our "Visiting CyLab" page.

    Not a CyLab partner? Learn how your company can benefit from becoming one. Contact the Senior Director of Partnerships, Michael Lisanti, at mlisanti@cmu.edu or 412-268-1870.

    Agenda

    Day 1: Tuesday, October 28, 2025 (EDT)

    8:00 a.m. - 9:00 a.m. - Breakfast and Registration

    9:00 a.m. - 9:15 a.m. – Welcome and Opening Remarks

    9:15 a.m. - 10:12 a.m. – Session I: Partnerships and Initiatives

    Moderator: Michael Lisanti

    10:12 a.m. - 10:30 a.m. – Break

    10:30 a.m. - 11:15 a.m. – Session II: Privacy (Part 1)

    Moderator: Giulia Fanti

    • Steven Wu: Does Machine Unlearning Really Forget? | PDF
    • Lorrie Cranor: Finding Privacy Notice and Choice Threats with UsersFirst | PDF
    • Joseph Calandrino: The Impact of Third-Party Library Settings Defaults on Mobile App Privacy

    11:15 a.m. - 12:05 p.m. – Session III: Privacy (Part 2)

    Moderator: Giulia Fanti

    12:05 p.m. - 1:30 p.m. – Lunch and Student Poster Session

    1:30 p.m. - 2:30 p.m. – Session IV: Software Security (Part 1)

    Moderator: Lujo Bauer

    • Bryan Parno: Using Verus to Produce formally verified, high performance protocol components
    • Limin Jia: Learning to Triage Taint Flows Reported by Dynamic Program Analysis in Node.js Packages
    • Ruben Martins: Generative AI for Automated Vulnerability Repair
    • David Svoboda: Automated Repair of Static Analysis Alerts for C/C++ Source Code | PDF

    2:30 p.m. - 3:15 p.m. – Session V: Software Security (Part 2)

    Moderator: Lujo Bauer

    3:15 p.m. - 3:30 p.m. – Break

    3:30 p.m. - 4:15 p.m. – Session VI: Generative AI and ML (Part 1)

    Moderator: Vyas Sekar

    4:15 p.m. - 5:05 p.m. – Session VII: Generative AI and ML (Part 2)

    Moderator: Vyas Sekar

    5:05 p.m. - 5:10 p.m. – End-of-day remarks

    5:45 p.m. - 8:15 p.m. – Dinner at Mansions on Fifth

    Day 2: Wednesday, October 29, 2025 (EDT)

    8:00 a.m. - 9:00 a.m.– Breakfast and Registration

    9:00 a.m. - 9:05 a.m. – Opening remarks

    9:05 a.m. - 9:30 a.m. – CyLab Distinguished Alumni Award Presentation

    Moderator: Lorrie Cranor

    • Serge Egelman (Distinguished Alumni Award honoree): Anonymity, Consent, and Other Noble Lies: An Empirical Study of the Data Economy | PDF

    9:30 a.m. - 10:15 a.m. – Session VIII: System and Hardware Security (Part 1)

    Moderator: Osman Yağan

    • Riccardo Paccagnella: Security Challenges Due to Modern Microarchitectural Optimizations
    • Bill Scherlis: The 2025 NASEM Cyber Hard Problems Study | PDF
    • Vyas Sekar: Incalmo: An LLM-assisted System for Autonomously Executing Multi-host Network Attacks

    10:15 a.m. - 10:30 a.m. – Break

    10:30 a.m. - 11:20 a.m. – Session IX: System and Hardware Security (Part 2)

    Moderator: Osman Yağan

    • Nataliya Shevchenko: Modeling cyber threats with MBSE | PDF
    • James Hoe: Developing an FPGA-Accelerated Log Monitoring System using SYCL
    • Robert Garrett: Behavior-based Confidence Scoring to Support Access Management in Zero Trust Systems
    • Glenn Gasmen: Effectiveness of standards-based or regulated approaches to mitigating risk to transport refrigeration systems

    11:20 a.m. - 12:05 p.m. – Session X: Crypto and Blockchain (Part 1)

    Moderator: Nicolas Christin

    12:05 p.m. - 1:30 p.m. – Lunch and Student Poster Session

    1:30 p.m. - 2:15 p.m. – Session XI: Crypto and Blockchain (Part 2)

    Moderator: Sarah Scheffler

    • Sarah Scheffler: Privacy in an ID-Verified World
    • Rose Silver: Towards Simple and Private Algorithms and Data Structures
    • Ken Mai: PQC acceleration in customized embedded FPGAs | PDF

    2:15 p.m. - 2:30 p.m. - Break

    2:30 p.m. - 3:30 p.m. - Session XII: Usability/Human Factors

    Moderator: Lorrie Cranor

    • Hana Habib: Improving the Usability of Private Machine Learning Tools | PDF
    • Clement Fung: Adopting AI to Protect Industrial Control Systems: Assessing Challenges and Opportunities from the Operators’ Perspective
    • Elijah Bouma-Sims: Leveraging Generative AI to Protect Users from SMS Scams
    • Prasoon Patidar: Enabling Smart Building Chatbots for Privacy Preserving Sensing

    3:30 p.m. - 3:35 p.m. – Closing remarks

    4:00 p.m. - 6:00 p.m. – Cyber Innovators Connect – Connan Room, downstairs

    Agenda:

    Special thanks to our program committee: Lorrie Cranor, Lujo Bauer, Mark Sherman, Osman Yagan, Michael Lisanti, Jason Griess, Isabelle Glassmith, Beth Bucher, Michael Cunningham, Ashley Bon, and Danyel Kusbit.