About Carl Magnus Bruhner

My name is Carl Magnus Bruhner, and I’m a computer science PhD student in cybersecurity at Linköping University (LiU) since fall 2023. My position is funded by WASP1 as part of the WASP Graduate School and WARA Ops2. At LiU, I’m part of the Security and Networks Group of the ADIT division at the Department of Computer and Information Science (IDA). I’m supervised by Senior Associate Professor Niklas Carlsson.

I do research within web security and privacy, especially studying the web PKI with X.509 certificate use and management, root store and CA/Browser policies and practices, trust, and related areas. I am using empirical research methods, including passive and active internet measurements to study and understand behaviors “in the wild”. I identify trends and contrast findings to practices, standards, and requirements to find non-compliance, pain points & bottlenecks, and potential improvements both technical and administrative.

Publications

  • Marcus Döberl, York Freiherr von Wangenheim, Carl Magnus Bruhner, David Hasselquist, Martin Arlitt, Niklas Carlsson, Chain-Sawing: A Longitudinal Analysis of Certificate Chains, Proc. IFIP Networking, Jun. 2024. (pdf, doi)
  • David Cerenius, Martin Kaller, Carl Magnus Bruhner, Martin Arlitt, Niklas Carlsson, Trust Issue(r)s: Certificate Revocation and Replacement Practices in the Wild, Proc. Passive and Active Measurement Conference (PAM), Mar. 2024. (pdf, doi)
  • Carl Magnus Bruhner, David Hasselquist, Niklas Carlsson, Bridging the Privacy Gap: Enhanced User Consent Mechanisms on the Web, Proc. NDSS Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb @NDSS), Mar. 2023. (pdf, doi) ** Best paper runner-up award **
  • Carl Magnus Bruhner, Oscar Linnarsson, Matus Nemec, Martin Arlitt, Niklas Carlsson, Changing of the Guards: Certificate and Public Key Management on the Internet, Proc. Passive and Active Measurement Conference (PAM), Mar. 2022. (pdf, doi) (Also presented as poster at NDSS 2024)

Academic experience

During my undergraduate studies, I worked as a lab/teaching assistant in courses on Computer Networks and Internet Protocols (TDTS06/11) where I also held lessons and worked to improve the lab assignments. Additionally, I worked as a research assistant, continuing research based on my bachelor’s thesis that resulted in a published research paper. As part of my doctoral studies, I continuously supervise Bachelor’s and Master’s theses. In 2025, I will give lectures in Computer Networks and Distributed Systems (TDTS04).

Education

  • M.Sc. in Engineering (Information Technology/Secure systems) (Civilingenjör i informationsteknologi), Linköping University, 2022
  • B.Sc. in Business Administration (Civilekonom, part of Civilekonomprogrammet)
    Linköping University, 2021
  • B.Sc. in Engineering (Information Technology) (part of Civilinjengör i informationsteknologi)
    Linköping University, 2020

Industry experience

I’m an entrepreneurial jack-of-all-trades, with a passion for cybersecurity, research, organizational development and project management. My background spans everything from sales and marketing to politics, health, tech, non-profits and research. I have a passion for working with businesses & organizations targeting consumers and end-users. In between my bachelor/master’s and my doctoral studies, I worked as a project manager and consultant within cloud and cybersecurity for two years. I hold several Microsoft Azure/365 certifications (including AZ-500, MS-500, SC-400, and SC-300), and am certified in Cybersecurity (CC) by ISC2.

To find out more, you can find me at LinkedIn. Don’t hesitate to connect!

  1. Wallenberg AI, Autonomous Systems and Software Program: wasp-sweden.org ↩︎
  2. WASP Research Arena for Operational Data: wara-ops.org ↩︎