Secures web and cloud systems by blending large-scale measurement, user-centered evaluation, and machine learning to reveal risky practices and deliver usable defenses across browsers, authentication, tracking, and access control.