As a growing number of connected devices are introduced to the world with a goal of increasing quality of life, they also pose a risk of collecting sensitive information and invading privacy. Carnegie Mellon University CyLab researchers are working to ensure that as new devices and new technologies are created, your digital privacy remains protected.
We have researchers working in the following subtopics of applications of security and privacy. Check out each of their research:
Less is not more; Mapping a better route to user ad settings
For users looking to change their privacy settings on websites like Facebook, it often feels like a scavenger hunt. Now, researchers from Carnegie Mellon and the University of Michigan are exploring design options to make settings related to advertising preferences more findable.
Cookie consent banners need improvement, may not be the answer
Over the past several years, websites have begun implementing cookie consent banners to meet regulatory requirements, allowing users to make choices about how their personal information is collected and shared. However, CyLab researchers say many of these banners miss the mark and may not be the best way to offer users privacy options.
CyLab icon connects users with online privacy choices
Have you noticed the new icon popping up on websites across the Internet? Thanks to researchers at Carnegie Mellon’s CyLab Security and Privacy Institute, the University of Michigan, and Fordham University, users can now easily make choices about how websites use their personal information, all in one convenient spot.
CyLab and S3D host International Data Privacy Day event
The CyLab Security and Privacy Institute and Software and Societal Systems Department hosted Carnegie Mellon's annual International Data Privacy Day event, bringing students, faculty, and staff together to discuss various aspects of online privacy.
iPhone security compromises prove difficult to detect
Mobile phones can be abused to enable stalking through methods like location tracking, account compromise, and remote surveillance. While experts can help victims detect and recover from this type of technology abuse, researchers at Carnegie Mellon's CyLab Security and Privacy Institute say typical users aren't equipped to identify and resolve these issues on their own.
The (un)importance of online interview modes for security and privacy studies
In a rigorous new study just published in the journal PLOS ONE, a team of CyLab researchers show that that there is little evidence to suggest that interviews with crowd workers about sensitive topics are significantly impacted by the chosen online interview mode.
Why should we use password managers? We asked a security researcher.
The most common passwords in 2021 were (1) 123456, (2) 123456789, and (3) qwerty. We sat down with a CyLab researcher to better understand why password managers are such useful tools in securing our accounts, and why more of us should use them.
CyLab researchers design privacy icon to be used by California law
The state of California has proposed an official icon to include next to opt-out text—a blue stylized toggle icon developed by researchers from Carnegie Mellon University’s CyLab and the University of Michigan’s School of Information. Users may begin seeing the new stylized icon at the bottom of websites’ footers early next year.
IoT labels will help consumers figure out which devices are spying on them
A team of CyLab researchers have developed a prototype security and privacy “nutrition label” that performed well in user tests. To develop the label, the team consulted with a diverse group of 22 security and privacy experts across industry, government, and academia.
New tool gives researchers a better look at online anonymous marketplaces
In a study presented at the Knowledge Discovery and Data (KDD) Mining Conference, Xiao Hui Tai teamed up with two other researchers to develop an algorithm that will help law enforcement agencies crack down on illicit products being sold on online anonymous marketplaces.
When privacy and the arts collide
Sophie Calle is a French artist who often blurs the lines between life and her art. What if Calle knew how to code, and take advantage of our personal data to create an even more personalized, privacy-intrusive form of art? That’s something CyLab’s Maggie Oates has been exploring.
Apps are rife with privacy compliance issues, and here’s some evidence
A team of researchers from Carnegie Mellon University and Fordham University recently created the Mobile App Privacy System (MAPS), a tool that uses natural language processing, machine learning, and code analysis to identify potential privacy compliance issues by inspecting apps’ privacy policies and code.
Security and privacy need to be easy
In 2005, Carnegie Mellon hosted a first-of-its-kind conference that brought together researchers from dozens of universities and companies around the world with one mission: make privacy and security tools easier to use. That conference, the Symposium On Usable Privacy and Security (SOUPS), is holding its 15th annual meeting next month. SOUPS, as well as the entire usable privacy and security field, have deep roots at CMU.
NSF awards $1.2M to create a digital assistant to answer people’s privacy questions
The National Science Foundation (NSF) has awarded a $1.2 million grant to a team of researchers from Carnegie Mellon University, Fordham University, and Penn State University to develop a tool—a “privacy assistant”—that will allow users to simply ask questions about the privacy issues that matter to them.
Ads, cookies, and the European privacy regulation
BUYER UNAWARE: Security and privacy rarely considered before buying IoT devices
In a study presented at the ACM CHI conference in Glasgow earlier this month, researchers from Carnegie Mellon University’s CyLab found that security and privacy risks may not be on the list of considerations when consumers purchase new IoT devices.
CyLab's Norman Sadeh speaks on plenary panel about data protection and privacy
Last week, CyLab's Norman Sadeh, a professor in the Institute for Software Research in the School of Computer Science and co-director of the Privacy Engineering program, spoke about privacy, artificial intelligence (AI), and the challenges at the intersection of the two at the International Conference of Data Protection and Privacy Commissioners (ICDPPC).
CyLab’s Lorrie Cranor receives the IAPP 2018 Leadership Award
The International Association of Privacy Professionals (IAPP) has named Lorrie Cranor the recipient of the 2018 Leadership Award. Cranor, a professor in the Institute for Software Research and the Department of Engineering and Public Policy, accepted the award at the IAPP’s Global Privacy Summit on March 27.
Explore Other Research Topics