Directory

Lorrie Faith Cranor is the Director and Bosch Distinguished Professor in Security and Privacy Technologies of CyLab and the FORE Systems Professor of Computer Science and of Engineering and Public Policy at Carnegie Mellon University. She also directs the CyLab Usable Privacy and Security Laboratory (CUPS) and co-directs the MSIT-Privacy Engineering masters program. In 2016 she served as Chief Technologist at the US Federal Trade Commission, working in the office of Chairwoman Ramirez. She is also a co-founder of Wombat Security Technologies, Inc, a security awareness training company that was acquired by Proofpoint.

She has authored more than 200 research papers on online privacy, usable security, and other topics. She has played a key role in building the usable privacy and security research community, having co-edited the seminal book Security and Usability (O'Reilly 2005) and founded the Symposium On Usable Privacy and Security (SOUPS). She also chaired the Platform for Privacy Preferences Project (P3P) Specification Working Group at the W3C and authored the book Web Privacy with P3P (O’Reilly 2002). She has served on a number of boards and working groups, including the Electronic Frontier Foundation Board of Directors, the Computing Research Association Board of Directors, the Aspen Institute Cybersecurity Group, and on the editorial boards of several journals.

In her younger days she was honored as one of the top 100 innovators 35 or younger by Technology Review magazine. More recently she was elected to the ACM CHI Academy, named an ACM Fellow for her contributions to usable privacy and security research and education, and named an IEEE Fellow for her contributions to privacy engineering. She has also received an Alumni Achievement Award from the McKelvey School of Engineering at Washington University in St. Louis, the 2018 ACM CHI Social Impact Award, the 2018 International Association of Privacy Professionals Privacy Leadership Award, and (with colleagues) the 2018 IEEE Cybersecurity Award for Practice.

She was previously a researcher at AT&T-Labs Research and taught in the Stern School of Business at New York University. She holds a doctorate in Engineering and Policy from Washington University in St. Louis. In 2012-13 she spent her sabbatical as a fellow in the Frank-Ratchye STUDIO for Creative Inquiry at Carnegie Mellon University where she worked on fiber arts projects that combined her interests in privacy and security, quilting, computers, and technology. She practices yoga, plays soccer, walks to work, and runs after her three children.

Office
2107 Collaborative Innovation Center
Phone
412.268.7534
Email
lorrie@cs.cmu.edu
Google Scholar
Lorrie Cranor
Websites
Lorrie Cranor's website

Improving Transparency for Online Privacy

What's Next

Online Security and Privacy

Education

1996 Doctor of Science, Engineering and Policy, Washington University

1996 MS, Computer Science, Washington University

1993 MS, Technology and Human Affairs, Washington University

1992 BS, Engineering and Public Policy, Washington University

Affiliations

Media mentions


CyLab Security and Privacy Institute

Applications open for CMU Ph.D. programs in cybersecurity and privacy

Carnegie Mellon University offers several Ph.D. programs that attract students interested in pursuing research careers in security and privacy.

CyLab Security and Privacy Institute

CyLab hosts industry leaders at the 2024 Partners Conference

CyLab's focus on institutional and corporate collaboration was on full display at its annual Partners Conference, which highlighted the latest research in security and privacy with an interactive forum between faculty, students, industry, and government.

CyLab Security and Privacy Institute

Bryan Parno honored with the IEEE Cybersecurity Award for Practice

Bryan Parno, Kavčić-Moura Professor of Electrical and Computer Engineering and Professor of Computer Science, has received the Institute of Electrical and Electronics Engineers (IEEE) Cybersecurity Award for Practice for his contributions to the theory and practice of end-to-end secure systems.

CyLab Security and Privacy Institute

CyLab leading tenure-track faculty hiring search

The CyLab Security and Privacy Institute at Carnegie Mellon University is leading a university-wide priority hiring search for tenure-track faculty who focus on security or privacy.

CyLab Security and Privacy Institute

CyLab hosts top cybersecurity researchers for the 2024 NSF SaTC PI Meeting

On Sept. 4-5, more than 500 of the world’s leading cyber-systems researchers convened in Pittsburgh for the 2024 National Science Foundation Secure and Trustworthy Cyberspace Principal Investigators’ Meeting (NSF SaTC PI), hosted by Carnegie Mellon University’s CyLab Security and Privacy Institute.

CyLab Security and Privacy Institute

CyLab faculty, students present research at the 33rd USENIX Security Symposium

Carnegie Mellon faculty and students presented on a wide range of topics at the 33rd USENIX Security Symposium. Held in Philadelphia on August 14-16, the event brought together experts from around the world, who highlighted the latest advances in the security and privacy of computer systems and networks.

CyLab Security and Privacy Institute

CyLab undergrads take the lead on groundbreaking research

This summer, two CyLab papers that featured undergrads as lead writers were accepted and presented at major international conferences.

CyLab Security and Privacy Institute

CyLab researchers present their work at 2024 SOUPS

Carnegie Mellon faculty and students shared their research at the 2024 Symposium on Usable Privacy and Security (SOUPS), which took place August 11-13 in Philadelphia.

CyLab Security and Privacy Institute

Navigating digital financial inclusion in Africa

As the presence of mobile phones becomes increasingly widespread in Africa, digital services have allowed for more financial inclusion among low- and middle-income countries within the continent. A group of Carnegie Mellon University researchers led by Karen Sowon, a postdoctoral researcher at CMU’s CyLab Security and Privacy Institute, investigated these issues and recently published a paper on "The Role of User-Agent Interactions on Mobile Money Practices in Kenya and Tanzania."

CyLab Security and Privacy Institute

CyLab researchers present research at the IEEE Symposium on Security and Privacy

CyLab faculty members and students presented their research on topics ranging from mobile money practices in Africa to uncovering and identifying side-channel and evasion attacks at the 45th Institute of Electrical and Electronics Engineers (IEEE) Symposium on Security and Privacy.

Marketplace

Cranor quoted on “broadband nutrition labels” for internet service

CyLab Director Lorrie Cranor was quoted on the introduction of “broadband nutrition labels” for internet service.

CyLab Security and Privacy Institute

CyLab researchers present at ACM CHI 2024

CyLab Security and Privacy Institute researchers presented 10 papers and participated in one special interest group at the Association for Computing Machinery (ACM) Conference on Human Factors in Computing Systems (CHI 2024).