image I am a Research Expert on Privacy Engineering at the imec-DistriNet research group at the Department of Computer Science at KU Leuven.
My research focuses security and privacy threat modeling and automating several facets of threat modeling (creating models, elicitation, risk analysis, etc.). Two key projects in this area are the SPARTA Threat Modeling Tool and the LINDDUN Privacy Threat Modeling Framework.
I am interested in the how these design-level analysis activities for security and privacy activities integrate in other development activities (DevOps). For example, automated reconstruction of design models (or verifying their correspondence with code) to enable a tighter integration as part of continuous integration pipelines. Another related area of interest is how to tie design analysis results to Data Protection compliance activities in support of the Data Protection by Design principle.