| 2026 | CHI | Who am I Talking to? A Large-Scale Measurement of Surface Attribution Across Real-World Security and Privacy Interfaces. | Marian Harbach, Jessica Johnson |
| 2025 | CHI | Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns. | Yusra Elbitar, Soheil Khodayari, Marian Harbach, Gianluca De Stefano, Balazs Csaba Engedy, Giancarlo Pellegrino, Sven Bugiel |
| 2024 | CHI | Websites Need Your Permission Too - User Sentiment and Decision-Making on Web Permission Prompts in Desktop Chrome. | Marian Harbach |
| 2024 | ICSE | GenderMag Improves Discoverability in the Field, Especially for Women: An Multi-Year Case Study of Suggest Edit, a Code Review Feature. | Emerson R. Murphy-Hill, Alberto Elizondo, Ambar Murillo, Marian Harbach, Bogdan Vasilescu, Delphine Carlson, Florian Dessloch |
| 2024 | NDSS | Don't Interrupt Me - A Large-Scale Study of On-Device Permission Prompt Quieting in Chrome. | Marian Harbach, Igor Bilogrevic, Enrico Bacis, Serena Chen, Ravjit Uppal, Andy Paicu, Elias Klim, Meggyn Watkins, Balazs Engedy |
| 2019 | CHI | A Promise Is A Promise: The Effect of Commitment Devices on Computer Security Intentions. | Alisa Frik, Nathan Malkin, Marian Harbach, Eyal Per, Serge Egelman |
| 2016 | CHI | Behavior Ever Follows Intention?: A Validation of the Security Behavior Intentions Scale (SeBIS). | Serge Egelman, Marian Harbach, Eyal Per |
| 2016 | CHI | The Anatomy of Smartphone Unlocking: A Field Study of Android Lock Screens. | Marian Harbach, Alexander De Luca, Serge Egelman |
| 2016 | CHI | Keep on Lockin' in the Free World: A Multi-National Comparison of Smartphone Locking. | Marian Harbach, Alexander De Luca, Nathan Malkin, Serge Egelman |
| 2016 | SOUPS | Do or Do Not, There Is No Try: User Engagement May Not Improve Security Outcomes. | Alain Forget, Sarah Pearman, Jeremy Thomas, Alessandro Acquisti, Nicolas Christin, Lorrie Faith Cranor, Serge Egelman, Marian Harbach, Rahul Telang |
| 2014 | CHI | Using personal examples to improve risk communication for security & privacy decisions. | Marian Harbach, Markus Hettig, Susanne Weber, Matthew Smith |
| 2014 | CHI | Now you see me, now you don't: protecting smartphone authentication from shoulder surfers. | Alexander De Luca, Marian Harbach, Emanuel von Zezschwitz, Max-Emanuel Maurer, Bernhard Ewald Slawik, Heinrich Hussmann, Matthew Smith |
| 2014 | SOUPS | It's a Hard Lock Life: A Field Study of Smartphone (Un)Locking Behavior and Risk Perception. | Marian Harbach, Emanuel von Zezschwitz, Andreas Fichtner, Alexander De Luca, Matthew Smith |
| 2013 | CCS | Rethinking SSL development in an appified world. | Sascha Fahl, Marian Harbach, Henning Perl, Markus Koetter, Matthew Smith |
| 2013 | CHI | Location privacy revisited: factors of privacy decisions. | Benjamin Henne, Marian Harbach, Matthew Smith |
| 2013 | FC | Hey, You, Get Off of My Clipboard - On How Usability Trumps Security in Android Password Managers. | Sascha Fahl, Marian Harbach, Marten Oltrogge, Thomas Muders, Matthew Smith |
| 2013 | FC | Sorry, I Don't Get It: An Analysis of Warning Message Texts. | Marian Harbach, Sascha Fahl, Polina Yakovleva, Matthew Smith |
| 2013 | SOUPS | On the ecological validity of a password study. | Sascha Fahl, Marian Harbach, Yasemin Acar, Matthew Smith |
| 2012 | CCS | Why eve and mallory love android: an analysis of android SSL (in)security. | Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith, Lars Baumgrtner, Bernd Freisleben |
| 2012 | CCS | Towards measuring warning readability. | Marian Harbach, Sascha Fahl, Thomas Muders, Matthew Smith |
| 2012 | PST | Towards privacy-preserving access control with hidden policies, hidden credentials and hidden decisions. | Marian Harbach, Sascha Fahl, Michael Brenner, Thomas Muders, Matthew Smith |
| 2012 | WWW | All our messages are belong to us: usable confidentiality in social networks. | Marian Harbach, Sascha Fahl, Thomas Muders, Matthew Smith |
| 2012 | TrustCom | Confidentiality as a Service - Usable Security for the Cloud. | Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith |
| 2012 | SOUPS | Helping Johnny 2.0 to encrypt his Facebook conversations. | Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith, Uwe Sander |
| 2009 | HPCC | A Streaming Intrusion Detection System for Grid Computing Environments. | Matthew Smith, Fabian Schwarzer, Marian Harbach, Thomas Noll, Bernd Freisleben |