Applications open for CMU Ph.D. programs in cybersecurity and privacy

Carnegie Mellon University offers several Ph.D. programs that attract students interested in pursuing research careers in security and privacy. Although security and privacy Ph.D. students are distributed across a number of CMU colleges and departments, they all have opportunities to actively engage in research at the university-wide CyLab Security and Privacy Institute.

“CyLab faculty members work across all of CMU’s Ph.D. programs where students do security and privacy research,” said Lorrie Cranor, CyLab director. “In choosing a Ph.D. program, it's often best for a prospective student to look at which faculty members you'd be interested in working with, and apply to the programs where those faculty members are appointed. There is no need to email the faculty before you apply.”

Beyond working with their advisors in their home department, CyLab Ph.D. students join our vibrant community of security and privacy researchers and participate in CyLab seminars and events, student activities, and interactions with CyLab partners.

The Programs

While there are a variety of Ph.D. programs in which CyLab students enroll, there are many similarities between the programs. Many of our faculty have interdisciplinary interests, hold multiple appointments, or advise students in more than one Ph.D. program.

Carnegie Mellon’s College of Engineering offers two Ph.D. programs that feature CyLab faculty members as advisors and research collaborators: Electrical and Computer Engineering and Engineering and Public Policy.

• CyLab students and faculty associated with the Electrical and Computer Engineering Ph.D. program often study the security of systems, e.g., web security or IoT security; network security; and software security. Many students also examine how to use AI to make systems more secure, as well as how to make AI more secure. Students enrolled in this program take mostly computer systems courses in the process of obtaining a Ph.D. degree.
• Engineering and Public Policy Ph.D. students tend to be interested in both the technical issues surrounding security and privacy, and the policy decisions that incorporate this research with the goal of protecting and empowering consumers. CyLab students enrolled in this program take courses in technical engineering, quantitative and qualitative policy analysis, economics, and statistics.
  
  “For example, I’ve had Engineering and Public Policy students that have explored consumer privacy issues and the ability of users to make privacy choices and opt out of data collection,” said Cranor. “We submitted public comments to the California Attorney General’s Office with recommendations for a California privacy opt-out icon based on our research, and that’s the icon that was eventually adopted.”

Carnegie Mellon’s School of Computer Science (SCS) offers three Ph.D. programs that feature CyLab faculty members as advisors and research collaborators: Computer Science, Societal Computing, and Software Engineering.

• Offered through Carnegie Mellon’s Computer Science Department, the Computer Science Ph.D. program gives students an opportunity to cultivate a broad foundation and awareness of core concepts in computer science, while focusing on a narrower research area within computer science.
• The Software Engineering Ph.D. program is offered through CMU’s Software and Societal Systems Department (S3D). Software Engineering trains students to solve problems associated with building large-scale and critical software systems.
• The Societal Computing Ph.D. program is also offered through S3D. Societal Computing students focus on issues involving the impact of computing on society, which includes issues related to privacy and security. There is also a joint program between the Societal Computing and Engineering and Public Policy Ph.D. programs, allowing students to pursue both.

CyLab Ph.D. students also pursue doctoral degrees in the following programs offered at Carnegie Mellon University:

• The Human-Computer Interaction Institute offers a Ph.D. in Human-Computer Interaction (HCI), where CyLab students conduct usability and human-factors research in security and privacy.
• CyLab students in SCS’s Machine Learning Ph.D. program focus on the use of machine learning to solve security and privacy problems as well as on security and privacy issues associated with machine learning systems.
• The Ph.D. program in Public Policy & Management at CMU’s Heinz College of Information Systems and Public Policy prepares students to apply a rigorous scientific approach to social, organizational, economic, and management problems in an increasingly connected world.
• The College of Engineering’s Mechanical Engineering Ph.D. program answers the need for professional skills with an intense program that provides depth in fundamental mechanical engineering areas and breadth in emerging cross-boundary areas of mechanical engineering leadership.

Within all of these programs, Ph.D. students enjoy unique opportunities to conduct groundbreaking research alongside CyLab faculty members, share their research with CyLab industry and government partners, and present their work at the world’s foremost conferences that help shape the future of best practices in security and privacy.

The Faculty

Prospective Ph.D. students are encouraged to apply to the program or programs that feature CyLab faculty members with whom they would most like to work as doctoral students. Applicants also have the option of applying to more than one program. Admitted students will be invited to visit the programs in person to decide which program suits them best before enrolling.

To learn more about CyLab’s core and affiliated faculty members, their current research, and the departments in which they are appointed, applicants can consult CyLab’s searchable directory as a resource.

Several CyLab faculty members are currently recruiting Ph.D. students for specific projects and research areas. Some examples include:

• Riccardo Paccagnella, assistant professor in S3D and Electrical and Computer Engineering, is recruiting students in the area of system and hardware security.
• Norman Sadeh, professor in S3D, co-director of the Privacy Engineering Program, and co-founder of the Societal Computing Ph.D. Program, is recruiting students to conduct research on privacy assistants for agentic AI and on security, privacy, and governance risks of agentic AI in the enterprise.

How to Apply

Application deadlines for fall enrollment in all of our Ph.D. programs are in December. You can learn more about application details and apply to each program via the college or research center that administers the program. Below are the Ph.D. application deadlines and application links for each of the CyLab-affiliated Ph.D. programs at Carnegie Mellon University:

• Electrical and Computer Engineering - December 15 application deadline. Apply here.
• Engineering and Public Policy - December 15 application deadline. Apply here.
• Computer Science - December 9 application deadline. Apply here.
• Societal Computing - December 9 application deadline. Apply here.
• Software Engineering - December 9 application deadline. Apply here.
• Human-Computer Interaction - December 9 application deadline. Apply here.
• Machine Learning - December 9 application deadline. Apply here.
• Public Policy & Management - December 1 application deadline. Apply here.
• Mechanical Engineering - December 1 application deadline. Apply here.