Lorrie Faith Cranor
- Directs CyLab and the CyLab Usable Privacy and Security Laboratory at CMU
- Founded SOUPS, the Symposium on Usable Privacy and Security
- Co-edited Security and Usability (O'Reilly, 2005)
Bio
Lorrie Faith Cranor directs CyLab at Carnegie Mellon and the CyLab Usable Privacy and Security Laboratory, founded the SOUPS symposium, and co-edited Security and Usability. Her group's password research measured what composition rules, meters, and expiry policies actually do to the passwords people choose.
Profile built from public academic and publication records.
Where their work shows up
Password policy used to be set by intuition. Her lab produced the measurements that replaced it: which rules produce predictable substitutions, what a strength meter changes, and how forced rotation degrades the passwords it was meant to improve. That evidence is a large part of why NIST 800-63 dropped complexity and rotation requirements. The consent work is equally load-bearing for CIAM, where preference and consent management is a product feature with regulatory weight. See what is passwordless.
Related on Start with Identity
- ExpertCo-author of the Needham-Schroeder protocol
Michael D. Schroeder co-authored two of the foundational papers in this field within three years of each other: the 1975 design-principles paper with Jerome Sal
- ExpertCo-author of the NIST RBAC model
David Ferraiolo co-authored "Role-Based Access Controls" with Rick Kuhn, presented at the 15th National Computer Security Conference in October 1992. The NIST m
- ExpertCo-author of the NIST RBAC model
Rick Kuhn co-authored the 1992 NIST paper on role-based access control with David Ferraiolo and has worked on the model, its formalization, and its assurance ev