The Internet Analytics Group advances a bold vision: to make complex digital ecosystems secure, transparent, and privacy-resilient for every user. Our research lies at the intersection of cybersecurity, privacy, and large-scale Internet measurement, uncovering structural weaknesses in platforms, protocols, and software architectures that enable data abuse and compromise user rights.
We analyze interactions across mobile apps, IoT devices, browsers, and online services to expose hidden tracking mechanisms and systemic security flaws in permission models and sandboxing frameworks. Our work has revealed previously unknown cross-app and cross-device tracking practices and directly influenced new permissions and security patches in Android, IoT devices, and major web browsers. Notably, we uncovered the abuse of localhost sockets to bridge web and mobile tracking in collaboration with Radboud University.
We focus on real-world security and privacy problems affecting hundreds of millions of users, maximizing the scientific and societal impact of our research efforts. Our work has been praised by the academic community, industry actors and regulatory bodies through multiple research awards. Beyond the research community, our findings have been widely covered by international media outlets like The Washington Post or The Guardian, and informed platform security discussions, contributed to standardization and regulatory debates under frameworks such as the GDPR and DSA.
A list of our publications is available here.


Financed by: European Commission DIGITAL-2022-SKILLS-03

Financed by: Ministry of Science and Innovation
Enhancing Digital Security, Privacy and TRUST in softWARE
The Open Digital Identity Observatory
Comprehensive data-driven software analysis for the 21st century
Understanding the Android Open Source Project Supply Chain
GDPR Compliance Cloud Platform for Micro Enterprises
Analysis of Third Party SDKs and Endpoints for AppCensus