| 2023 | CHI | Less About Privacy: Revisiting a Survey about the German COVID-19 Contact Tracing App. | Maximilian Hring, Eva Gerlitz, Matthew Smith, Christian Tiefenau |
| 2023 | SOUPS | Evolution of Password Expiry in Companies: Measuring the Adoption of Recommendations by the German Federal Office for Information Security. | Eva Gerlitz, Maximilian Hring, Matthew Smith, Christian Tiefenau |
| 2023 | SOUPS | Adventures in Recovery Land: Testing the Account Recovery of Popular Websites When the Second Factor is Lost. | Eva Gerlitz, Maximilian Hring, Charlotte Theresa Mdler, Matthew Smith, Christian Tiefenau |
| 2021 | SOUPS | Please do not use !?_ or your License Plate Number: Analyzing Password Policies in German Companies. | Eva Gerlitz, Maximilian Hring, Matthew Smith |
| 2021 | SOUPS | Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany. | Maximilian Hring, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, Yasemin Acar |
| 2020 | CHI | On Conducting Security Developer Studies with CS Students: Examining a Password-Storage Study with CS Students, Freelancers, and Company Developers. | Alena Naiakshina, Anastasia Danilova, Eva Gerlitz, Matthew Smith |
| 2019 | CHI | "If you want, I can store the encrypted password": A Password-Storage Field Study with Freelance Developers. | Alena Naiakshina, Anastasia Danilova, Eva Gerlitz, Emanuel von Zezschwitz, Matthew Smith |