Security vulnerabilities of an ICT system can hide in different communication and interaction layers, including the technical, human, and regulatory ones. Secure design systems may have technical flaws, puzzle their users, or fail to implement standards, best practices, and regulations.
IRiSC integrates methods from computer science, social sciences, and law to address such a complexity and to research how to best protect systems from cyberattacks.
By following security & privacy by design and a human & legally attentive approach to security, IRiSC researchers work cross-disciplinarily. They conduct a broad-range of research activities on cybersecurity, since they are aware that successful solutions depend on how the different perspectives are combined and harmonized.
Partners will find in IRiSC the right know-how to solve the technical, social, and regulatory challenges of real-world cybersecurity scenarios. Examples include usable secure communication solutions; privacy-preserving, compliant, ethical and trustworthy personal data processing, e.g., for genomic and biomedical data analysis; anti-counterfeiting technologies based on new unforgeable materials; and anti-ransomware software that are respectful of a company’s workflow and needs.
Interdisciplinary Research Group in Socio-technical Cybersecurity
A Way Out the Ethico-Legal Maze of Social Media Data Scraping
People know that once they publish something online, such content becomes “publicly available” and can be downloaded and re-used by others, for example, researchers and data scientists. The reality is far more complicated. And for us, finding a way to comply with data protection obligations and to respect the tenets of research ethics became an … Continued
Our comments to EDPB’s Guidelines on Dark patterns
Together with the manipulation experts Rachele Carli (University of Bologna) and Cristiana Santos (University of Utrecht), we have submitted our feedback to the “Guidelines 3/2022 on Dark patterns in social media platform interfaces: How to recognise and avoid them” elaborated by the European Data Protection Board. Read our public comments.
Panel at the CPDP (Conference on Computer Privacy and Data Protection) on “Privacy design, dark patterns and speculative data futures”
Panel at the CPDP (Conference on Computer Privacy and Data Protection) 2022 on "Privacy design, dark patterns and speculative data futures” The DECEPTICON project has organized and financed a great interactive and interdisciplinary panel: Opposite forces harshly confront each other on the battlefield of digital services. On one side, privacy-invasive mechanisms like dark … Continued
Presentation at the Data Privacy Day organized by the CNPD “Ces cookies nuisent à la vie privée !”
Presentation at the Data Privacy Day organized by the CNPD "Ces cookies nuisent à la vie privée !” Une conférence de la CNPD pour comprendre comment les cookies permettent le traçage et le ciblage publicitaire et comment le design trompeur et des informations non transparentes favorisent leur acceptation. A cette occasion, la CNPD a présenté ses … Continued
Dark patterns at the Luxembourg Privacy Salon
Dark patterns at the Luxembourg Privacy Salon The last edition of the Luxembourg Privacy Salon focused on dark patterns. Dr. Arianna Rossi led an interactive presentation with the audience. Watch the video to learn more about dark patterns and how they circumvent the data protection requirements of transparency, consent and privacy by default.
We are looking for industry partners interested in doing joint research with us!
Get in touch with us
SnT – Interdisciplinary Centre for Security, Reliability and Trust
Maison du Nombre, 6, avenue de la Fonte L-4364 Esch-sur-Alzette
info-irisc-lab@uni.lu