My research interests revolve around security, privacy, and trust in computing environments. Check out my research page and publications for more specific topics. I received my PhD in Information Science from the University of Pittsburgh, and my Master’s and Bachelor’s in Computer Science/Engineering from Sharif University of Technology and Ferdowsi University, respectively.

I am currently recruiting PhD students to join my group and engage in exciting projects such as Black-Box Learning of Web Application Authorization Policies.

Interested in security and privacy research? Take a look at the opportunities and open positions.

Research word cloud

News

03/25
Accepted paper in ACM CODASPY 2025 on mining negative authorization in relationship-based access control (with Ferhat Demirkiran)
03/25
Associate Editor of IEEE Transactions on Dependable and Secure Computing (TDSC)
01/25
Program Chair of ACM SACMAT 2025. Check out the Call for Papers!
–/25
Program committee member of ACM CODASPY 2025, ACM Web 2025, DBSec 2025, ESORICS 2025, IEEE TPS 2025
05/24
Our paper “Converting Rule-Based Access Control Policies: From Complemented Conditions to Deny Rules” received the Best Paper Award of ACM SACMAT 2024! Congratulations to Josue Ruiz for his first SACMAT publication and Best Paper!
05/24
Honored to be a panelist in ACM SACMAT 2024 on the topic of “Zero Trust Architectures and the Future of Security and Privacy” along with esteemed colleagues: Elisa Bertino, Hongxin Hu, and Shouhuai Xu
03/24
Program Co-Chair of IEEE TPS 2024 (with Jaideep Vaidya and Rachel Cummings). Check out the Call for Papers!
03/24
Associate Editor of IEEE Transactions on Services Computing (TSC)
03/24
Accepted paper in ACM SACMAT 2024 on converting complemented conditions to deny rules in access control policies (with Josue Ruiz, Paliath Narendran, and Padmavathi Iyer)
–/24
Program committee member of ACM SACMAT 2024, ACM Web 2024, DBSec 2024, SECRYPT 2024, CCS 2024 Poster/Demo, WPES 2024
07/23
Padmavathi Iyer successfully defended her PhD dissertation, titled Mining and Black-Box Learning of Relationship-Based Access Control Policies. Starting her Tenure-Track Assistant Professor position at Drury University in Fall 2023!
05/23
Accepted paper in ACM SACMAT 2023 on automated learning of web access control policies (with my PhD student Padmavathi Iyer)
–/23
Program committee member of ACM SACMAT 2023, DBSec 2023, WPES 2023, CCS 2023 Poster/Demo
09/22
Officially promoted to the Associate Professor rank
08/22
Published in the ACM Transactions on Security and Privacy on learning policies from black-box systems (with my PhD student Padmavathi Iyer)
05/22
Two accepted papers in ACM SACMAT 2022: a regular research paper on effective evaluation of policy mining (with my PhD student Padmavathi Iyer) and a Blue-Sky/Vision paper on physical access control (with my industry collaborators Hans van der Laan and Albert Dercksen)
05/22
Published in the Computers and Security journal on expressiveness of negative authorization (with my PhD student Padmavathi Iyer and my colleague Paliath Narendran)
04/22
UAlbany’s junior faculty recognition as an NSF CAREER Award recipient
–/22
Program committee member of ACM CODASPY 2022, ACM SACMAT 2022, WPES 2022
05/21
Accepted paper in ACM SACMAT 2021 on expressiveness of rule-based access control models (with my colleague Paliath Narendran and my PhD student Padmavathi Iyer)
03/21
Honored to receive NSF CAREER Award! CAREER: Black-Box Learning of Web Application Authorization Policies
–/21
Program committee member of ACM CODASPY 2021, ACM SACMAT 2021, SKM 2021
12/20
Program Co-Chair of IEEE CIC 2021 (with Surya Nepal and Barbara Carminati)
11/20
SUNY seed award for our project on privacy in educational systems (with my colleagues Shaghayegh Sahebi and Zheng Yan)
06/20
Best Paper Award of ACM SACMAT 2020 for our paper on active learning of relationship-based policies (with my PhD student Padmavathi Iyer)
12/19
Program Co-Chair of IEEE TPS 2020 (with Ravi Sandhu and Barbara Carminati)