Skip to content

Lujo Bauer

Publication record assembled from the DBLP archive of ranked conferences.

Papers indexed

83

Venues

22

Active years

2005–2026

Best venue rank

A*

Where they publish

Papers

83 indexed papers, newest first.

YearVenueTitleAuthors
2026ACLUser Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarios.Xiaoyuan Wu, Roshni Kaushik, Wenkai Li, Lujo Bauer, Koichi Onoue
2026CHIPassing Down Passwords: How Older Adults Approach Postmortem Account Access and Digital Estate Planning.Jenny Tang, Xiaoyuan Wu, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2026NDSSDOM-XSS Detection via Webpage Interaction Fuzzing and URL Component Synthesis.Nuno Sabino, Darion Cassel, Rui Abreu, Pedro Ado, Lujo Bauer, Limin Jia
2026SPIncalmo: an Autonomous Llm-Assisted System for Red Teaming Multi-Host Networks.Brian Singer, Keane Lucas, Lakshmi Adiga, Meghna Jain, Lujo Bauer, Vyas Sekar
2025CHILLM Whisperer: An Inconspicuous Attack to Bias LLM Responses.Weiran Lin, Anna Gerchanovsky, Omer Akgul, Lujo Bauer, Matt Fredrikson, Zifan Wang
2025CHIMeasuring Risks to Users' Health Privacy Posed by Third-Party Web Tracking and Targeted Advertising.Eric Zeng, Xiaoyuan Wu, Emily N. Ertmann, Lily Huang, Danielle F. Johnson, Anusha T. Mehendale, Brandon T. Tang, Karolina Zhukoff, Michael Adjei-Poku, Lujo Bauer, Ari B. Friedman, Matthew S. McCoy
2025EMNLPEstimating LLM Consistency: A User Baseline vs Surrogate Metrics.Xiaoyuan Wu, Weiran Lin, Omer Akgul, Lujo Bauer
2025NDSSTransparency or Information Overload? Evaluating Users' Comprehension and Perceptions of the iOS App Privacy Report.Xiaoyuan Wu, Lydia Hu, Eric Zeng, Hana Habib, Lujo Bauer
2025RAIDPerry: A High-level Framework for Accelerating Cyber Deception Experimentation.Brian Singer, Yusuf Saquib, Lujo Bauer, Vyas Sekar
2025SOUPSAdopting AI to Protect Industrial Control Systems: Assessing Challenges and Opportunities from the Operators' Perspective.Clement Fung, Eric Zeng, Lujo Bauer
2025SOUPSMisuse, Misreporting, Misinterpretation of Statistical Methods in Usable Privacy and Security Papers.Jenny Tang, Lujo Bauer, Nicolas Christin
2024CCSTraining Robust ML-based Raw-Binary Malware Detectors in Hours, not Months.Keane Lucas, Weiran Lin, Lujo Bauer, Michael K. Reiter, Mahmood Sharif
2024CHIInterdisciplinary Approaches to Cybervulnerability Impact Assessment for Energy Critical Infrastructure.Andrea Gallardo, Robert Erbes, Katya Le Blanc, Lujo Bauer, Lorrie Faith Cranor
2024DIMVAApproach for the Optimization of Machine Learning Models for Calculating Binary Function Similarity.Suguru Horimoto, Keane Lucas, Lujo Bauer
2024IROSTargeted Image Transformation for Improving Robustness in Long Range Aircraft Detection.Rebecca Martin, Clement Fung, Nikhil Varma Keetha, Lujo Bauer, Sebastian A. Scherer
2024NDSSAttributions for ML-based ICS Anomaly Detection: From Theory to Practice.Clement Fung, Eric Zeng, Lujo Bauer
2024NDSSGroup-based Robustness: A General Framework for Customized Robustness in the Real World.Weiran Lin, Keane Lucas, Neo Eyal, Lujo Bauer, Michael K. Reiter, Mahmood Sharif
2023SPShedding Light on Inconsistencies in Grid Cybersecurity: Disconnects and Recommendations.Brian Singer, Amritanshu Pandey, Shimiao Li, Lujo Bauer, Craig Miller, Lawrence T. Pileggi, Vyas Sekar
2023SOUPSTowards Usable Security Analysis Tools for Trigger-Action Programming.McKenna McCall, Eric Zeng, Faysal Hossain Shezan, Mitchell Yang, Lujo Bauer, Abhishek Bichhawat, Camille Cobb, Limin Jia, Yuan Tian
2022ESORICSPerspectives from a Comprehensive Evaluation of Reconstruction-based Anomaly Detection in Industrial Control Systems.Clement Fung, Shreya Srinarasi, Keane Lucas, Hay Bryan Phee, Lujo Bauer
2022ICMLConstrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks.Weiran Lin, Keane Lucas, Lujo Bauer, Michael K. Reiter, Mahmood Sharif
2022WWWInvestigating Advertisers' Domain-changing Behaviors and Their Impacts on Ad-blocker Filter Lists.Su-Chin Lin, Kai-Hsiang Chou, Yen Chen, Hsu-Chun Hsiao, Darion Cassel, Lujo Bauer, Limin Jia
2022SOUPSDetecting iPhone Security Compromise in Simulated Stalking Scenarios: Strategies and Obstacles.Andrea Gallardo, Hanseul Kim, Tianying Li, Lujo Bauer, Lorrie Faith Cranor
2021AsiaCCSMalware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytes.Keane Lucas, Mahmood Sharif, Lujo Bauer, Michael K. Reiter, Saurabh Shintre
2021WWWTowards a Lightweight, Hybrid Approach for Detecting DOM XSS Vulnerabilities with Machine Learning.William Melicher, Clement Fung, Lujo Bauer, Limin Jia
2020CCSPractical Recommendations for Stronger, More Usable Passwords Combining Minimum-strength, Minimum-length, and Blocklist Requirements.Joshua Tan, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2020SACMATMetering Graphical Data Leakage with Snowman.Qiuyu Xiao, Brittany Subialdea, Lujo Bauer, Michael K. Reiter
2020SOUPSHow Risky Are Real Users' IFTTT Applets?Camille Cobb, Milijana Surbatovich, Anna Kawakami, Mahmood Sharif, Lujo Bauer, Anupam Das, Limin Jia
2019CHIA Field Study of Computer-Security Perceptions Using Anti-Virus Customer-Support Chats.Mahmood Sharif, Kevin A. Roundy, Matteo Dell'Amico, Christopher Gates, Daniel Kats, Lujo Bauer, Nicolas Christin
2019SOUPSWhy people (don't) use password managers effectively.Shikun Zhang, Sarah Pearman, Lujo Bauer, Nicolas Christin
2018CHI"It's not actually that horrible": Exploring Adoption of Two-Factor Authentication at a University.Jessica Colnago, Summer Devlin, Maggie Oates, Chelse Swoopes, Lujo Bauer, Lorrie Faith Cranor, Nicolas Christin
2018CVPROn the Suitability of Lp-Norms for Creating and Preventing Adversarial Examples.Mahmood Sharif, Lujo Bauer, Michael K. Reiter
2018NDSSRiding out DOMsday: Towards Detecting and Preventing DOM Cross-Site Scripting.William Melicher, Anupam Das, Mahmood Sharif, Lujo Bauer, Limin Jia
2018SOUPSUser Behaviors and Attitudes Under Password Expiration Policies.Hana Habib, Pardis Emami Naeini, Summer Devlin, Maggie Oates, Chelse Swoopes, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2017CCSLet's Go in for a Closer Look: Observing Passwords in Their Natural Habitat.Sarah Pearman, Jeremy Thomas, Pardis Emami Naeini, Hana Habib, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Serge Egelman, Alain Forget
2017CHICan Unicorns Help Users Compare Crypto Key Fingerprints?Joshua Tan, Lujo Bauer, Joseph Bonneau, Lorrie Faith Cranor, Jeremy Thomas, Blase Ur
2017CHIDesign and Evaluation of a Data-Driven Password Meter.Blase Ur, Felicia Alfieri, Maung Aung, Lujo Bauer, Nicolas Christin, Jessica Colnago, Lorrie Faith Cranor, Henry Dixon, Pardis Emami Naeini, Hana Habib, Noah Johnson, William Melicher
2017WWWSome Recipes Can Do More Than Spoil Your Appetite: Analyzing the Security and Privacy Risks of IFTTT Recipes.Milijana Surbatovich, Jassim Aljuraidan, Lujo Bauer, Anupam Das, Limin Jia
2017USENIXFast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks.William Melicher, Blase Ur, Saranga Komanduri, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2017SOUPSSelf-driving cars and data collection: Privacy perceptions of networked autonomous vehicles.Cara Bloom, Joshua Tan, Javed Ramjohn, Lujo Bauer
2017SOUPSPrivacy Expectations and Preferences in an IoT World.Pardis Emami Naeini, Sruti Bhagavatula, Hana Habib, Martin Degeling, Lujo Bauer, Lorrie Faith Cranor, Norman M. Sadeh
2017SOUPSDiversify to Survive: Making Passwords Stronger with Adaptive Policies.Sean M. Segreti, William Melicher, Saranga Komanduri, Darya Melicher, Richard Shay, Blase Ur, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Michelle L. Mazurek
2016CCSAccessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition.Mahmood Sharif, Sruti Bhagavatula, Lujo Bauer, Michael K. Reiter
2016CHIUsability and Security of Text Passwords on Mobile Devices.William Melicher, Darya Kurilova, Sean M. Segreti, Pranshu Kalvani, Richard Shay, Blase Ur, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Michelle L. Mazurek
2016CHISharing Personal Content Online: Exploring Channel Choice and Multi-Channel Behaviors.Manya Sleeper, William Melicher, Hana Habib, Lujo Bauer, Lorrie Faith Cranor, Michelle L. Mazurek
2016CHIDo Users' Perceptions of Password Security Match Reality?Blase Ur, Jonathan Bees, Sean M. Segreti, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2016FCIntroducing Reputation Systems to the Economics of Outsourcing Computations to Rational Workers.Jassim Aljuraidan, Lujo Bauer, Michael K. Reiter, Matthias Beckerle
2015CHIA Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior.Richard Shay, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Alain Forget, Saranga Komanduri, Michelle L. Mazurek, William Melicher, Sean M. Segreti, Blase Ur
2015NDSSRun-time Monitoring and Formal Analysis of Information Flows in Chromium.Lujo Bauer, Shaoying Cai, Limin Jia, Timothy Passaro, Michael Stroucken, Yuan Tian
2015SOUPS"I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab.Blase Ur, Fumiko Noma, Jonathan Bees, Sean M. Segreti, Richard Shay, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2014CHICan long passwords be secure and usable?Richard Shay, Saranga Komanduri, Adam L. Durity, Phillip (Seyoung) Huh, Michelle L. Mazurek, Sean M. Segreti, Blase Ur, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2014FASTToward strong, usable access control for shared distributed data.Michelle L. Mazurek, Yuan Liang, William Melicher, Manya Sleeper, Lujo Bauer, Gregory R. Ganger, Nitin Gupta, Michael K. Reiter
2014PLDIAndroid taint flow analysis for app sets.William Klieber, Lori Flynn, Amar Bhosale, Limin Jia, Lujo Bauer
2014SACMATWhat are the most important challenges for access control in new computing domains, such as mobile, cloud and cyber-physical systems?Lujo Bauer, Florian Kerschbaum
2013CCSMeasuring password guessability for an entire university.Michelle L. Mazurek, Saranga Komanduri, Timothy Vidas, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Patrick Gage Kelley, Richard Shay, Blase Ur
2013CCSWhat you want is not what you get: predicting sharing policies for text-based content on facebook.Arunesh Sinha, Yan Li, Lujo Bauer
2013ESORICSRun-Time Enforcement of Information-Flow Properties on Android - (Extended Abstract).Limin Jia, Jassim Aljuraidan, Elli Fragkaki, Lujo Bauer, Michael Stroucken, Kazuhide Fukushima, Shinsaku Kiyomoto, Yutaka Miyake
2013FCThe Impact of Length and Mathematical Operators on the Usability and Security of System-Assigned One-Time PINs.Patrick Gage Kelley, Saranga Komanduri, Michelle L. Mazurek, Richard Shay, Timothy Vidas, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2013SOUPSWhat matters to users?: factors that affect users' willingness to share information with online advertisers.Pedro Giovanni Leon, Blase Ur, Yang Wang, Manya Sleeper, Rebecca Balebako, Richard Shay, Lujo Bauer, Mihai Christodorescu, Lorrie Faith Cranor
2012CHITag, you can see it!: using tags for access control in photo sharing.Peter F. Klemperer, Yuan Liang, Michelle L. Mazurek, Manya Sleeper, Blase Ur, Lujo Bauer, Lorrie Faith Cranor, Nitin Gupta, Michael K. Reiter
2012ESORICSModeling and Enhancing Android's Permission System.Elli Fragkaki, Lujo Bauer, Limin Jia, David Swasey
2012PSTOut of sight, out of mind: Effects of displaying access-control information near the item it controls.Kami Vaniea, Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter
2012SPGuess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms.Patrick Gage Kelley, Saranga Komanduri, Michelle L. Mazurek, Richard Shay, Timothy Vidas, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Julio C. Lpez
2012SOUPSCorrect horse battery staple: exploring the usability of system-assigned passphrases.Richard Shay, Patrick Gage Kelley, Saranga Komanduri, Michelle L. Mazurek, Blase Ur, Timothy Vidas, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2011ACSACDon't Bump, Shake on It: the exploitation of a popular accelerometer-based smart phone exchange and its secure replacement.Ahren Studer, Timothy Passaro, Lujo Bauer
2011CHIOf passwords and people: measuring the effect of password-composition policies.Saranga Komanduri, Richard Shay, Patrick Gage Kelley, Michelle L. Mazurek, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Serge Egelman
2011CHIExploring reactive access control.Michelle L. Mazurek, Peter F. Klemperer, Richard Shay, Hassan Takabi, Lujo Bauer, Lorrie Faith Cranor
2011CHIMore than skin deep: measuring effects of the underlying model on access-control system usability.Robert W. Reeder, Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, Kami Vaniea
2010CHIAccess control for home data sharing: evaluating social acceptability.Michelle L. Mazurek, J. P. Arsenault, Joanna Bresee, Nitin Gupta, Iulia Ion, Christina Johns, Daniel Lee, Yuan Liang, Jenny Olsen, Brandon Salmon, Richard Shay, Kami Vaniea, Lujo Bauer, Lorrie Faith Cranor, Gregory R. Ganger, Michael K. Reiter
2010SACMATSolving the access-control puzzle: finding the pieces and putting them together.Lujo Bauer, Adam J. Lee
2010SOUPSEncountering stronger password requirements: user attitudes and behaviors.Richard Shay, Saranga Komanduri, Patrick Gage Kelley, Pedro Giovanni Leon, Michelle L. Mazurek, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
2009CHIReal life challenges in access-control management.Lujo Bauer, Lorrie Faith Cranor, Robert W. Reeder, Michael K. Reiter, Kami Vaniea
2009SACMATxDomain: cross-border proofs of access.Lujo Bauer, Limin Jia, Michael K. Reiter, David Swasey
2008CHIA user study of policy creation in a flexible access-control system.Lujo Bauer, Lorrie Faith Cranor, Robert W. Reeder, Michael K. Reiter, Kami Vaniea
2008CHIExpandable grids for visualizing and authoring computer security policies.Robert W. Reeder, Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, Kelli Bacon, Keisha How, Heather Strong
2008SACMATDetecting and resolving policy misconfigurations in access-control systems.Lujo Bauer, Scott Garriss, Michael K. Reiter
2007ESORICSEfficient Proving for Practical Distributed Access-Control Systems.Lujo Bauer, Scott Garriss, Michael K. Reiter
2007NDSSConsumable Credentials in Linear-Logic-Based Access-Control Systems.Kevin D. Bowers, Lujo Bauer, Deepak Garg, Frank Pfenning, Michael K. Reiter
2007SOUPSLessons learned from the deployment of a smartphone-based access-control system.Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, Kami Vaniea
2006ESORICSA Linear Logic of Authorization and Knowledge.Deepak Garg, Lujo Bauer, Kevin D. Bowers, Frank Pfenning, Michael K. Reiter
2005ESORICSEnforcing Non-safety Security Policies with Program Monitors.Jay Ligatti, Lujo Bauer, David Walker
2005PLDIComposing security policies with polymer.Lujo Bauer, Jay Ligatti, David Walker
2005SPDistributed Proving in Access-Control Systems.Lujo Bauer, Scott Garriss, Michael K. Reiter