Carnegie Mellon University

Lujo Bauer

Lujo Bauer

Professor, Electrical and Computer Engineering

Download Hi-res Photo
Address 5000 Forbes Avenue
Pittsburgh, PA 15213


Lujo Bauer is a Professor in the Electrical and Computer Engineering Department and in the Institute for Software Research at Carnegie Mellon University. He received his B.S. in Computer Science from Yale University in 1997 and his Ph.D., also in Computer Science, from Princeton University in 2003.

Dr. Bauer's research interests span many areas of computer security and privacy, and include building usable access-control systems with sound theoretical underpinnings, developing languages and systems for run-time enforcement of security policies on programs, and generally narrowing the gap between a formal model and a practical, usable system. His recent work focuses on developing tools and guidance to help users stay safer online and in examining how advances in machine learning can lead to a more secure future.

Dr. Bauer served as the program chair for the flagship computer security conferences of the IEEE (S&P 2015) and the Internet Society (NDSS 2014) and is an associate editor of ACM Transactions on Information and System Security.


Ph.D., 2003 
Computer Science 
Princeton University

M.A., 1999 
Computer Science 
Princeton University

B.S., 1997 
Computer Science 
Yale University


Lujo Bauer's research interests are in computer security -- he is particularly interested in building usable access-control systems with sound theoretical underpinnings, and generally in narrowing the gap between a formal model and a usable system. Topics that Lujo is currently actively studying include distributed access control, proof-carrying authorization, program monitors, security automata, and languages for specifying security policies.


  • Computer security
  • Access control
  • Program monitoring
  • Security automata
  • Policy specification
  • Formal methods
  • Cybersecurity
  • Language-based security
  • Secure software systems
  • Usable security

Related news

Tuesday, February 20, 2024

CyLab Faculty, Students to Present at NDSS Symposium 2024

Carnegie Mellon faculty and students will present on a wide range of topics at the 31st Annual Network and Distributed System Security (NDSS) Symposium.
Friday, February 02, 2024

Adversarial Training for Malware Detection

Researchers develop adversarial training methods to improve machine learning-based malware detection software.
Thursday, March 11, 2021

Studying Human-Bot Teams

Lujo Bauer, Matt Fredrikson, and Cleotilde Gonzalez are part of a team of researchers that was named a winner of a prestigious US Department of Defense (DoD) Multidisciplinary University Research Initiative (MURI) Award to study human-bot teams.
Monday, September 09, 2019

Security and privacy need to be easy

A brief history of usability research at Carnegie Mellon
Monday, July 08, 2019

Overcoming the privacy paradox

Why do some people say they value their privacy, but then willingly give up personal information when downloading an app? Understanding this so-called “privacy paradox” would help answer lots of questions about how privacy could be better dealt with.
Tuesday, April 30, 2019

First round of Secure and Private IoT Initiative funded projects announced

CyLab’s Secure and Private IoT Initiative (IoT@CyLab) has broken ground as the first round of funded proposals have been announced. Twelve selected projects will be funded for one year, and results will be presented at the IoT@CyLab annual summit next year.
Tuesday, December 11, 2018

CyLab researchers quoted in NYT

CyLab's Marios Savvides, Lujo Bauer, Jason Hong, Kathleen Carley, Martin Carlisle, and Carolina Zarate were featured in a New York Times piece about various ongoing research thrusts in CyLab to help combat cyberattacks.
Wednesday, October 24, 2018

CyLab faculty win big at the IEEE Cybersecurity Development Conference

CyLab faculty members Alessandro Acquisti, Lujo Bauer, Nicolas Christin, and Lorrie Cranor were presented with IEEE Cybersecurity awards at the IEEE Cybersecurity Development Conference, Oct. 2 in Boston.
Wednesday, January 17, 2018

Bauer's research on facial recognition technology cited in Digital Trends

Lujo Bauer and his research team recently developed eyeglasses that are capable of fooling facial recognition algorithms.
Thursday, January 11, 2018

Should we be concerned about our privacy in a world of self-driving cars?

CyLab researchers find out what information, if any, is this sensor-covered vehicle collecting about you.
Tuesday, December 19, 2017

CyLab study mentioned as facial detection finds its challengers

Last year, ECE/CyLab’s Lujo Bauer, Sruti Bhagavatula, and Mahmood Sharif were part of a research study that developed facial-recognition-fooling eyeglasses.
Thursday, October 05, 2017

Neural network developed by CyLab researchers mentioned

A neural network developed by CyLab researchers Lorrie Cranor, Lujo Bauer, and Nicolas Christin was mentioned in Science Magazine in relation to new GAN technology that guesses users’ passwords in an effort to beat cyber criminals at their own game.
Tuesday, September 19, 2017

CyLab faculty write article about password security

Cranor, Bauer, Christin, and their colleagues from the University of Maryland and the University of Chicago say that users need to go beyond creating passwords that are merely “hard to guess.” To defend themselves against hackers, they must now create passwords that are difficult for computers to figure out.
Tuesday, May 16, 2017

Bauer quoted in Vocativ on anti-facial recognition devices

Due to the rise of social media, technological devices and facial recognition databases, more than half of the U.S. adult population can be identified in public spaces by simply showing their face.
Wednesday, May 03, 2017

Bauer and researchers receive $6.2M MURI grant to fund cybersecurity project

Carnegie Mellon University’s Cleotilde (Coty) Gonzalez, Christian Lebiere and Lujo Bauer are part of a team that has received a $6.2 million Multidisciplinary University Research Initiative (MURI) grant from the Department of Defense to prevent cyber attacks.
Monday, November 21, 2016

Bauer and Sharif's glasses that fool facial recognition covered in the media

A team including ECE's Lujo Bauer and ECE Mahmood Sharif created an algorithm for generating eyeglasses, which, when printed and worn, can fool neural-network-based face-recognition algorithms into thinking that one person is another.
Wednesday, November 30, 2016

CyLab researchers spoof state-of-the-art facial recognition algorithms with printable eyeglasses

Want to fool facial recognition algorithms into thinking you’re Russell Crowe? Just ask a team of CyLab researchers to print you a pair of paper eyeglasses.
Monday, September 19, 2016

Is "password1!" a good password?

Bauer and a team of researchers in CyLab just published new work outlining a new advanced password meter that makes use of an artificial neural network. The researchers’ study received Best Paper Award at the USENIX Security Symposium.
Thursday, July 07, 2016

NATO partners with CyLab to increase password security

NATO has partnered with CyLab in an effort to increase password security. Together, NATO and CyLab will research how changing passwords every few years instead of every few months could improve the security of NATO’s systems.
Monday, June 27, 2016

NATO partners with CyLab to increase password security

The North Atlantic Treaty Organization (NATO), with its 28 member nations from both sides of the Atlantic Ocean, strives for peace and stability for its members.
Tuesday, June 14, 2016

Gligor delivers keynote, Bauer serves as co-chair at ACM SACMAT

ECE/CyLab's Virgil Gligor delivered the first keynote speech at the ACM Symposium on Access Control Models and Technologies (SACMAT). ECE/CyLab's Lujo Bauer was a program committee co-chair at the symposium.
Wednesday, May 25, 2016

Bauer, Christin, and Cranor’s password research receives high acclaim

A recent study, supervised by ECE/CyLab's Lujo Bauer and Nicolas Christin, and EPP/CyLab's Lorrie Cranor, has received honorable mention at ACM CHI 2016, the top conference for Human-Computer Interaction.
Tuesday, May 17, 2016

Users’ perceptions of password security do not always match reality

Think your password is secure? You may need to think again. People’s perceptions of password strength may not always match reality, according to a recent study by CyLab, Carnegie Mellon’s Security and Privacy Institute.
Wednesday, March 02, 2016

Bauer named computer security conference general chair

ECE/CyLab Professor Lujo Bauer has been named General Chair for the Network and Distributed Systems Security Symposium, one of the top computer security conferences, which took place Feb 21-24 in San Diego, CA.
Wednesday, February 24, 2016

Bauer quoted in KDKA news segment on secure passwords

ECE/CyLab's Lujo Bauer was extensively quoted in a KDKA 6-o'clock news segment featuring advice on how to create secure passwords. Bauer's advice comes from his research with EPP/CyLab's Lorrie Cranor and ECE/CyLab's Nicolas Christin.