Skip to main content


Photo of Prof Achim D. Brucker

Prof Achim D. Brucker

Chair in Cybersecurity


Telephone: 01392 724569

Extension: (Streatham) 4569

Visit personal website »

Group Website | Blog | @adbrucker | Google Scholar | DBLP | ORCID: 0000-0002-6355-1200

Short Bio

Achim is a full Professor in Computer Science (Chair in Cybersecurity) and Head of the Cybersecurity Group at the University of Exeter, UK and a leading expert in secure software engineering, cyber security, and formal methods. He is the head of the Cybersecurity Group at Exeter and leads the Software Assurance & Security Research Team. From December 2015 to May 2019, he was a Senior Lecturer and Consultant at the Computer Science Department of The University of Sheffield, UK.

Until December 2015, Achim was a Research Expert (Architect), Security Testing Strategist, and Project Lead in the Global Security Team of SAP SE, where, among others, he defined the risk-based security testing strategy of SAP that combines static, dynamic, and interactive security testing methods and integrates them deeply into SAP's Secure Software Development Life Cycle. He was involved in rolling out static and dynamic application security testing tools to the world-wide development organisation of SAP. Moreover, he represented SAP in OCL standardization process of the OMG.

Professional Activities and Achievements

  • Member of the EPSRC Peer Review College
  • Member of the Tests and Proofs (TAP) conference steering committee
  • ACM Senior Member
  • Speaker on professional security conferences such as OWASP AppSecEU.


  • Diplom (MSc) Computer Science (Major) & Microsystems Engineering (Minor), University of Freiburg, Germany
  • Dr. sc. ETH (PhD), ETH Zurich, Switzerland
  • Senior Fellow (SFHEA), AdvanceHE, UK


Achim's research interests include cyber security, formal methods, security/safety engineering, and software engineering. His aim is to build secure, reliable, resilient software (and hardware systems). He works on using formal methods, verification, static analysis, and testing techniques both on the source and binary level as well as on the level of specifications and abstract models. Examples of his work include the Isabelle/HOL-based tools HOL-OCL (a formal specification environment and theorem prover for UML/OCL specifications) and HOL-TestGen (a theorem prover-based testing environment), model-driven engineering tools (e.g., in the context of SecureUML and SecureBPMN), security testing, work in access control, mobile security and browser security. For a more complete overview of his research achievements, please visit his personal web page and the software assurance & security research page.

PhD Supervision

I always welcome applications from self-funded PhD students in all areas of security, safety, trustworthiness, or reliability. This includes, but is not limited to, topics in one or more of the following ares: formal methods, information security, software security, security engineering (both, software and hardware), verification, testing, and combinations thereof.

For more information about pursuing a PhD in Computer Science at the University of Exeter, please visit the postgraduate research page of the department. If you want to be supervised by me, please contact me at least four weeks before you apply (and before the deadline).

  • Ongoing PhD Projects
    • Supervisor
    • Co-Supervisor
      • Siqi Sun, University of Exeter, UK.
  • Completed PhD Projects
    • Supervisor
    • Co-Supervisor
      • Helmut Petritsch. Break-glass Access Control Policies. University of Regensburg, Germany, 2014.
        Helmut is now a  Software Architect at iteratec GmbH in Vienna, Austria.
      • Michael Foster. Inferring Extended Finite State Machines. Univeristy of Sheffield,UK. 2020.
        Michael is now a post-doctoral research assistant at The University of Sheffield, UK.