| 2026 | SACMAT | Composition of Access Control Schemes via Co-Existence: Three Case-Studies [Work in Progress Paper]. | Indrani Ray, Mahesh Tripunitara, Kami Vaniea |
| 2025 | CHI | Judging Phishing Under Uncertainty: How Do Users Handle Inaccurate Automated Advice? | Tarini Saka, Kalliopi Vakali, Adam D. G. Jenkins, Nadin Kokciyan, Kami Vaniea |
| 2024 | CHI | Not as easy as just update: Survey of System Administrators and Patching Behaviours. | Adam D. G. Jenkins, Linsen Liu, Maria K. Wolters, Kami Vaniea |
| 2024 | ESORICS | PhishCoder: Efficient Extraction of Contextual Information from Phishing Emails. | Tarini Saka, Kami Vaniea, Nadin Kkciyan |
| 2023 | CHI | Multi-User Smart Speakers - A Narrative Review of Concerns and Problematic Interactions. | Nicole Meng-Schneider, Rabia Yasa Kostas, Kami Vaniea, Maria K. Wolters |
| 2022 | AVI | Stay Home! Conducting Remote Usability Evaluations of Novel Real-World Authentication Systems Using Virtual Reality. | Florian Mathis, Joseph O'Hagan, Kami Vaniea, Mohamed Khamis |
| 2022 | CCS | Context-Based Clustering to Mitigate Phishing Attacks. | Tarini Saka, Kami Vaniea, Nadin Kkciyan |
| 2022 | CHI | Understanding Privacy Switching Behaviour on Twitter. | Dilara Keklloglu, Kami Vaniea, Walid Magdy |
| 2022 | CHI | Recruiting Participants With Programming Skills: A Comparison of Four Crowdsourcing Platforms and a CS Student Mailing List. | Mohammad Tahaei, Kami Vaniea |
| 2022 | ICWSM | From an Authentication Question to a Public Social Event: Characterizing Birthday Sharing on Twitter. | Dilara Keklloglu, Walid Magdy, Kami Vaniea |
| 2022 | VR | Virtual Reality Observations: Using Virtual Reality to Augment Lab-Based Shoulder Surfing Research. | Florian Mathis, Joseph O'Hagan, Mohamed Khamis, Kami Vaniea |
| 2022 | VR | Can I Borrow Your ATM? Using Virtual Reality for (Simulated) In Situ Authentication Research. | Florian Mathis, Kami Vaniea, Mohamed Khamis |
| 2021 | CHI | I Don't Need an Expert! Making URL Phishing Features Human Comprehensible. | Kholoud Althobaiti, Nicole Meng, Kami Vaniea |
| 2021 | CHI | RepliCueAuth: Validating the Use of a Lab-Based Virtual Reality Setup for Evaluating Authentication Systems. | Florian Mathis, Kami Vaniea, Mohamed Khamis |
| 2021 | CHI | Privacy Champions in Software Teams: Understanding Their Motivations, Strategies, and Challenges. | Mohammad Tahaei, Alisa Frik, Kami Vaniea |
| 2021 | CHI | "Developers Are Responsible": What Ad Networks Tell Developers About Privacy. | Mohammad Tahaei, Kami Vaniea |
| 2021 | CHI | Security Notifications in Static Analysis Tools: Developers' Attitudes, Comprehension, and Ability to Act on Them. | Mohammad Tahaei, Kami Vaniea, Konstantin Beznosov, Maria K. Wolters |
| 2021 | SOUPS | Deciding on Personalized Ads: Nudging Developers About User Privacy. | Mohammad Tahaei, Alisa Frik, Kami Vaniea |
| 2020 | CHI | What is this URL's Destination? Empirical Evaluation of Users' URL Reading. | Sara Albakry, Kami Vaniea, Maria K. Wolters |
| 2020 | CHI | RubikAuth: Fast and Secure Authentication in Virtual Reality. | Florian Mathis, John Williamson, Kami Vaniea, Mohamed Khamis |
| 2020 | CHI | Understanding Privacy-Related Questions on Stack Overflow. | Mohammad Tahaei, Kami Vaniea, Naomi Saphra |
| 2017 | CHI | Was my message read?: Privacy and Signaling on Facebook Messenger. | Roberto Hoyle, Srijita Das, Apu Kapadia, Adam J. Lee, Kami Vaniea |
| 2017 | CSCW | Viewing the Viewers: Publishers' Desires and Viewers' Privacy Concerns in Social Networks. | Roberto Hoyle, Srijita Das, Apu Kapadia, Adam J. Lee, Kami Vaniea |
| 2016 | CHI | Tales of Software Updates: The process of updating software. | Kami Vaniea, Yasmeen Rashidi |
| 2015 | CHI | Factors Related to Privacy Concerns and Protection Behaviors Regarding Behavioral Advertising. | Donghee Yvette Wohn, Jacob Solomon, Dan Sarkar, Kami Vaniea |
| 2014 | CHI | Betrayed by updates: how negative experiences affect future security. | Kami Vaniea, Emilee J. Rader, Rick Wash |
| 2014 | SOUPS | Out of the Loop: How Automated Software Updates Cause Unintended Security Consequences. | Rick Wash, Emilee J. Rader, Kami Vaniea, Michelle Rizor |
| 2012 | PST | Out of sight, out of mind: Effects of displaying access-control information near the item it controls. | Kami Vaniea, Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter |
| 2011 | CHI | More than skin deep: measuring effects of the underlying model on access-control system usability. | Robert W. Reeder, Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, Kami Vaniea |
| 2010 | CHI | Access control for home data sharing: evaluating social acceptability. | Michelle L. Mazurek, J. P. Arsenault, Joanna Bresee, Nitin Gupta, Iulia Ion, Christina Johns, Daniel Lee, Yuan Liang, Jenny Olsen, Brandon Salmon, Richard Shay, Kami Vaniea, Lujo Bauer, Lorrie Faith Cranor, Gregory R. Ganger, Michael K. Reiter |
| 2009 | CHI | Real life challenges in access-control management. | Lujo Bauer, Lorrie Faith Cranor, Robert W. Reeder, Michael K. Reiter, Kami Vaniea |
| 2008 | CHI | A user study of policy creation in a flexible access-control system. | Lujo Bauer, Lorrie Faith Cranor, Robert W. Reeder, Michael K. Reiter, Kami Vaniea |
| 2008 | SOUPS | Evaluating assistance of natural language policy authoring. | Kami Vaniea, Clare-Marie Karat, Joshua B. Gross, John Karat, Carolyn Brodie |
| 2007 | SOUPS | Lessons learned from the deployment of a smartphone-based access-control system. | Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, Kami Vaniea |