Skip to main content


Photo of Prof Achim D. Brucker

Prof Achim D. Brucker

Chair in Cybersecurity


Telephone: 01392 724569

Extension: (Streatham) 4569

Visit personal website »

Office Hours

Group Website | Blog | @adbrucker | Google Scholar | DBLP | ORCID

Short Bio

Achim is a full Professor in Computer Science (Chair in Cybersecurity) and Head of the Cybersecurity Group at the University of Exeter, UK and a leading expert in secure software engineering, cybersecurity, and formal methods. He is the head of the Cybersecurity Group at Exeter and leads the Software Assurance & Security Research Team. From December 2015 to May 2019, he was a Senior Lecturer and Consultant at the Computer Science Department of The University of Sheffield, UK.

Until December 2015, Achim was a Research Expert (Architect), Security Testing Strategist, and Project Lead in the Global Security Team of SAP SE, where, among others, he defined the risk-based security testing strategy of SAP that combines static, dynamic, and interactive security testing methods and integrates them deeply into SAP’s Secure Software Development Life Cycle. He was involved in rolling out static and dynamic application security testing tools to the world-wide development organization of SAP. Moreover, he represented SAP in OCL standardization process of the OMG.

Professional Activities and Achievements

  • Member of the Adivsory Board of Anzen Technology Systems.
  • Expert at the European Commission (EU).
  • Member of the EPSRC Peer Review College.
  • Member of the EPSRC Future Leadership Peer Review College.
  • Member of the Tests and Proofs (TAP) conference steering committee.
  • Speaker on professional security conferences such as OWASP AppSecEU.



Achim’s research interests include cybersecurity, formal methods, security/safety engineering, and software engineering. His aim is to build secure, reliable, resilient software (and hardware systems). He works on using formal methods, verification, static analysis, and testing techniques both on the source and binary level as well as on the level of specifications and abstract models. Examples of his work include the Isabelle/HOL-based tools HOL-OCL (a formal specification environment and theorem prover for UML/OCL specifications) and HOL-TestGen (a theorem prover-based testing environment), model-driven engineering tools (e.g., in the context of SecureUML and SecureBPMN), security testing, work in access control, mobile security and browser security. For a more complete overview of his research achievements, please visit his personal web page and the software assurance & security research page.