Michelle L. Mazurek

Kavous Salehzadeh Niksirat

Proceedings of the Twentieth Symposium on Usable Privacy and Security, 2024

Understanding How People Share Passwords.

[BibT_eX]

[DOI]

Proceedings of the Twentieth Symposium on Usable Privacy and Security, 2024

A Survey of Cybersecurity Professionals' Perceptions and Experiences of Safety and Belonging in the Community.

[BibT_eX]

[DOI]

Proceedings of the Twentieth Symposium on Usable Privacy and Security, 2024

Write, Read, or Fix? Exploring Alternative Methods for Secure Development Studies.

[BibT_eX]

[DOI]

Proceedings of the Twentieth Symposium on Usable Privacy and Security, 2024

Toxicity Detection is NOT all you Need: Measuring the Gaps to Supporting Volunteer Content Moderators through a User-Centric Method.

[BibT_eX]

[DOI]

Yang Trista Cao

Lovely-Frances Domingo

Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing, 2024

Designing a Data-Driven Survey System: Leveraging Participants' Online Data to Personalize Surveys.

[BibT_eX]

[DOI]

Lev Velykoivanenko

Proceedings of the CHI Conference on Human Factors in Computing Systems, 2024

2023

Editors' Introduction.

[BibT_eX]

[DOI]

Micah Sherr

Proc. Priv. Enhancing Technol., October, 2023

Toxicity Detection is NOT all you Need: Measuring the Gaps to Supporting Volunteer Content Moderators.

[BibT_eX]

[DOI]

Yang Trista Cao

Lovely-Frances Domingo

CoRR, 2023

Analysis of Google Ads Settings Over Time: Updated, Individualized, Accurate, and Filtered.

[BibT_eX]

[DOI]

Proceedings of the 22nd Workshop on Privacy in the Electronic Society, 2023

How Library IT Staff Navigate Privacy and Security Challenges and Responsibilities.

[BibT_eX]

[DOI]

Proceedings of the 32nd USENIX Security Symposium, 2023

The Role of Professional Product Reviewers in Evaluating Security and Privacy.

[BibT_eX]

[DOI]

Wentao Guo

Jason Walter

Proceedings of the 32nd USENIX Security Symposium, 2023

Bug Hunters' Perspectives on the Challenges and Benefits of the Bug Bounty Ecosystem.

[BibT_eX]

[DOI]

Proceedings of the 32nd USENIX Security Symposium, 2023

Is Cryptographic Deniability Sufficientƒ Non-Expert Perceptions of Deniability in Secure Messaging.

[BibT_eX]

[DOI]

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

Characterizing Everyday Misuse of Smart Home Devices.

[BibT_eX]

[DOI]

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

Optimistic Access Control for the Smart Home.

[BibT_eX]

[DOI]

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

Vulnerability Discovery for All: Experiences of Marginalization in Vulnerability Discovery.

[BibT_eX]

[DOI]

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

2022

Editors' Introduction.

[BibT_eX]

[DOI]

Florian Kerschbaum

Proc. Priv. Enhancing Technol., 2022

Why Users (Don't) Use Password Managers at a Large Educational Institution.

[BibT_eX]

[DOI]

Proceedings of the 31st USENIX Security Symposium, 2022

SoK: A Framework for Unifying At-Risk User Research.

[BibT_eX]

[DOI]

Proceedings of the 43rd IEEE Symposium on Security and Privacy, 2022

Investigating Influencer VPN Ads on YouTube.

[BibT_eX]

[DOI]

Proceedings of the 43rd IEEE Symposium on Security and Privacy, 2022

Above and Beyond: Organizational Efforts to Complement U.S. Digital Security Compliance Mandates.

[BibT_eX]

[DOI]

Proceedings of the 29th Annual Network and Distributed System Security Symposium, 2022

Garbage Collection Makes Rust Easier to Use: A Randomized Controlled Trial of the Bronze Garbage Collector.

[BibT_eX]

[DOI]

Michael Coblenz

Michael Hicks

Proceedings of the 44th IEEE/ACM 44th International Conference on Software Engineering, 2022

How Ready is Your Ready? Assessing the Usability of Incident Response Playbook Frameworks.

[BibT_eX]

[DOI]

Proceedings of the CHI '22: CHI Conference on Human Factors in Computing Systems, New Orleans, LA, USA, 29 April 2022, 2022

We Are the Experts, and We Are the Problem: The Security Advice Fiasco.

[BibT_eX]

[DOI]

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

Understanding the How and the Why: Exploring Secure Development Practices through a Course Competition.

[BibT_eX]

[DOI]

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

2021

ML-CB: Machine Learning Canvas Block.

[BibT_eX]

[DOI]

Nathan Reitinger

Proc. Priv. Enhancing Technol., 2021

Does the Bronze Garbage Collector Make Rust Easier to Use? A Controlled Experiment.

[BibT_eX]

[DOI]

Michael Coblenz

Michael Hicks

CoRR, 2021

From Secure to Military-Grade: Exploring the Effect of App Descriptions on User Perceptions of Secure Messaging.

[BibT_eX]

[DOI]

Proceedings of the WPES '21: Proceedings of the 20th Workshop on Workshop on Privacy in the Electronic Society, 2021

Strategies and Perceived Risks of Sending Sensitive Documents.

[BibT_eX]

[DOI]

Proceedings of the 30th USENIX Security Symposium, 2021

"It's stressful having all these phones": Investigating Sex Workers' Safety Goals, Risks, and Practices Online.

[BibT_eX]

[DOI]

Proceedings of the 30th USENIX Security Symposium, 2021

Evaluating In-Workflow Messages for Improving Mental Models of End-to-End Encryption.

[BibT_eX]

[DOI]

Proceedings of the 30th USENIX Security Symposium, 2021

HackEd: A Pedagogical Analysis of Online Vulnerability Discovery Exercises.

[BibT_eX]

[DOI]

Eric Zhang

Proceedings of the 42nd IEEE Symposium on Security and Privacy, 2021

Pursuing Usable and Useful Data Downloads Under GDPR/CCPA Access Rights via Co-Design.

[BibT_eX]

[DOI]

Proceedings of the Seventeenth Symposium on Usable Privacy and Security, 2021

Benefits and Drawbacks of Adopting a Secure Programming Language: Rust as a Case Study.

[BibT_eX]

[DOI]

Proceedings of the Seventeenth Symposium on Usable Privacy and Security, 2021

Comparing Security and Privacy Attitudes Among U.S. Users of Different Smartphone and Smart-Speaker Platforms.

[BibT_eX]

[DOI]

Proceedings of the Seventeenth Symposium on Usable Privacy and Security, 2021

An Investigation of Online Reverse Engineering Community Discussions in the Context of Ghidra.

[BibT_eX]

[DOI]

Mary Nicole Dugay Punzalan

Yla R. Tausczik

Proceedings of the IEEE European Symposium on Security and Privacy, 2021

2020

Build It, Break It, Fix It Contests: Motivated Developers Still Make Security Mistakes.

[BibT_eX]

[DOI]

Build It, Break It, Fix It: Contesting Secure Development.

[BibT_eX]

[DOI]

ACM Trans. Priv. Secur., 2020

It Lurks Within: A Look at the Unexpected Security Implications of Compliance Programs.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2020

What Twitter Knows: Characterizing Ad Targeting Practices, User Perceptions, and Ad Explanations Through Users' Own Twitter Data.

[BibT_eX]

[DOI]

Proceedings of the 29th USENIX Security Symposium, 2020

An Observational Investigation of Reverse Engineers' Processes.

[BibT_eX]

[DOI]

Jeffrey S. Foster

Proceedings of the 29th USENIX Security Symposium, 2020

Understanding security mistakes developers make: Qualitative analysis from Build It, Break It, Fix It.

[BibT_eX]

[DOI]

Proceedings of the 29th USENIX Security Symposium, 2020

A Comprehensive Quality Evaluation of Security and Privacy Advice on the Web.

[BibT_eX]

[DOI]

Proceedings of the 29th USENIX Security Symposium, 2020

Compliance Cautions: Investigating Security Issues Associated with U.S. Digital-Security Standards.

[BibT_eX]

[DOI]

Proceedings of the 27th Annual Network and Distributed System Security Symposium, 2020

Measuring Non-Expert Comprehension of Machine Learning Fairness Metrics.

[BibT_eX]

[DOI]

Michael Carl Tschantz

Proceedings of the 37th International Conference on Machine Learning, 2020

User Attitudes On Direct-to-Consumer Genetic Testing.

[BibT_eX]

[DOI]

Proceedings of the IEEE European Symposium on Security and Privacy, 2020

Improving Non-Experts' Understanding of End-to-End Encryption: An Exploratory Study.

[BibT_eX]

[DOI]

Proceedings of the IEEE European Symposium on Security and Privacy Workshops, 2020

Building and Validating a Scale for Secure Software Development Self-Efficacy.

[BibT_eX]

[DOI]

Desiree Abrokwa

Proceedings of the CHI '20: CHI Conference on Human Factors in Computing Systems, 2020

Human Comprehension of Fairness in Machine Learning.

[BibT_eX]

[DOI]

Michael Carl Tschantz

Proceedings of the AIES '20: AAAI/ACM Conference on AI, 2020

2019

Applied Digital Threat Modeling: It Works.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2019

Auditing Offline Data Brokers via Facebook's Advertising Platform.

[BibT_eX]

[DOI]

Proceedings of the World Wide Web Conference, 2019

How Well Do My Results Generalize? Comparing Security and Privacy Survey Results from MTurk, Web, and Telephone Samples.

[BibT_eX]

[DOI]

Sean Kross

Proceedings of the 2019 IEEE Symposium on Security and Privacy, 2019

The Effect of Entertainment Media on Mental Models of Computer Security.

[BibT_eX]

[DOI]

Proceedings of the Fifteenth Symposium on Usable Privacy and Security, 2019

A Qualitative Investigation of Insecure Code Propagation from Online Forums.

[BibT_eX]

[DOI]

Wei Bai

Omer Akgul

Proceedings of the 2019 IEEE Cybersecurity Development, 2019

Comparing and Developing Tools to Measure the Readability of Domain-Specific Texts.

[BibT_eX]

[DOI]

Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing, 2019

An Observational Investigation of Reverse Engineers' Process and Mental Models.

[BibT_eX]

[DOI]

Jeffrey S. Foster

Proceedings of the Extended Abstracts of the 2019 CHI Conference on Human Factors in Computing Systems, 2019

Does Being Verified Make You More Credible?: Account Verification's Effect on Tweet Credibility.

[BibT_eX]

[DOI]

Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems, 2019

Oh, the Places You've Been! User Reactions to Longitudinal Transparency About Third-Party Web Tracking and Inferencing.

[BibT_eX]

[DOI]

Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019

2018

Cracking ShadowCrypt: Exploring the Limitations of Secure I/O Systems in Internet Browsers.

[BibT_eX]

[DOI]

Proc. Priv. Enhancing Technol., 2018

Comparing Hypothetical and Realistic Privacy Valuations.

[BibT_eX]

[DOI]

Proceedings of the 2018 Workshop on Privacy in the Electronic Society, 2018

The Battle for New York: A Case Study of Applied Digital Threat Modeling at the Enterprise Level.

[BibT_eX]

[DOI]

Proceedings of the 27th USENIX Security Symposium, 2018

Hackers vs. Testers: A Comparison of Software Vulnerability Discovery Processes.

[BibT_eX]

[DOI]

Proceedings of the 2018 IEEE Symposium on Security and Privacy, 2018

User Comfort with Android Background Resource Accesses in Different Contexts.

[BibT_eX]

[DOI]

Thomas Gilray

Jeffrey S. Foster

Proceedings of the Fourteenth Symposium on Usable Privacy and Security, 2018

Dancing Pigs or Externalities?: Measuring the Rationality of Security Decisions.

[BibT_eX]

[DOI]

John P. Dickerson

Proceedings of the 2018 ACM Conference on Economics and Computation, 2018

Understanding User Tradeoffs for Search in Encrypted Communication.

[BibT_eX]

[DOI]

Wei Bai

Ciara Lynton

Charalampos Papamanthou

Proceedings of the 2018 IEEE European Symposium on Security and Privacy, 2018

Unpacking Perceptions of Data-Driven Inferences Underlying Online Targeting and Personalization.

[BibT_eX]

[DOI]

Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems, 2018

Asking for a Friend: Evaluating Response Biases in Security User Studies.

[BibT_eX]

[DOI]

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

Equitable Security: Optimizing Distribution of Nudges and Resources.

[BibT_eX]

[DOI]

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

2017

Balancing Security and Usability in Encrypted Email.

[BibT_eX]

[DOI]

IEEE Internet Comput., 2017

How Internet Resources Might Be Helping You Develop Faster but Less Securely.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2017

Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers.

[BibT_eX]

[DOI]

Proceedings of the 10th USENIX Workshop on Cyber Security Experimentation and Test, 2017

Exploring User Perceptions of Discrimination in Online Targeted Advertising.

[BibT_eX]

[DOI]

Angelisa C. Plane

Michael Carl Tschantz

Proceedings of the 26th USENIX Security Symposium, 2017

Comparing the Usability of Cryptographic APIs.

[BibT_eX]

[DOI]

Proceedings of the 2017 IEEE Symposium on Security and Privacy, 2017

Diversify to Survive: Making Passwords Stronger with Adaptive Policies.

[BibT_eX]

[DOI]

Proceedings of the Thirteenth Symposium on Usable Privacy and Security, 2017

You Want Me To Do What? A Design Study of Two-Factor Authentication Messages.

[BibT_eX]

[DOI]

Everest Liu

Proceedings of the Thirteenth Symposium on Usable Privacy and Security, 2017

Security Developer Studies with GitHub Users: Exploring a Convenience Sample.

[BibT_eX]

[DOI]

Proceedings of the Thirteenth Symposium on Usable Privacy and Security, 2017

Developers Need Support, Too: A Survey of Security Advice for Software Developers.

[BibT_eX]

[DOI]

Proceedings of the IEEE Cybersecurity Development, SecDev 2017, Cambridge, MA, USA, 2017

Where is the Digital Divide?: A Survey of Security, Privacy, and Socioeconomics.

[BibT_eX]

[DOI]

Sean Kross

Proceedings of the 2017 CHI Conference on Human Factors in Computing Systems, 2017

User Interactions and Permission Use on Android.

[BibT_eX]

[DOI]

Proceedings of the 2017 CHI Conference on Human Factors in Computing Systems, 2017

2016

Designing Password Policies for Strength and Usability.

[BibT_eX]

[DOI]

Richard Shay

Saranga Komanduri

Adam L. Durity

Phillip (Seyoung) Huh

ACM Trans. Inf. Syst. Secur., 2016

I Think They're Trying to Tell Me Something: Advice Sources and Selection for Digital Security.

[BibT_eX]

[DOI]

Amelia R. Malone

Proceedings of the IEEE Symposium on Security and Privacy, 2016

You Get Where You're Looking for: The Impact of Information Sources on Code Security.

[BibT_eX]

[DOI]

Proceedings of the IEEE Symposium on Security and Privacy, 2016

An Inconvenient Trust: User Attitudes toward Security and Usability Tradeoffs for Key-Directory Encryption Systems.

[BibT_eX]

[DOI]

Proceedings of the Twelfth Symposium on Usable Privacy and Security, 2016

You are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users.

[BibT_eX]

[DOI]

Yasemin Acar

Sascha Fahl

Proceedings of the IEEE Cybersecurity Development, 2016

Sharing Personal Content Online: Exploring Channel Choice and Multi-Channel Behaviors.

[BibT_eX]

[DOI]

Proceedings of the 2016 CHI Conference on Human Factors in Computing Systems, 2016

Usability and Security of Text Passwords on Mobile Devices.

[BibT_eX]

[DOI]

Proceedings of the 2016 CHI Conference on Human Factors in Computing Systems, 2016

Build It, Break It, Fix It: Contesting Secure Development.

[BibT_eX]

[DOI]

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

How I Learned to be Secure: a Census-Representative Survey of Security Advice Sources and Behavior.

[BibT_eX]

[DOI]

Sean Kross

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

2015

The Effectiveness of Security Images in Internet Banking.

[BibT_eX]

[DOI]

Joel Lee

Lujo Bauer

IEEE Internet Comput., 2015

Measuring Real-World Accuracies and Biases in Modeling Password Guessability.

[BibT_eX]

[DOI]

Proceedings of the 24th USENIX Security Symposium, 2015

A Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior.

[BibT_eX]

[DOI]

Proceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems, 2015

2014

A Tag-Based, Logical Access-Control Framework for Personal File Sharing.

[BibT_eX]

[DOI]