| 2026 | SOUPS | How Users Enter Generated Passwords on Non-Desktop Devices. | John Sadik, Joshoua Rodriguez, Hector J. Santos-Villalobos, Scott Ruoti |
| 2025 | CCS | Passwords and FIDO2 Are Meant To Be Secret: A Practical Secure Authentication Channel for Web Browsers. | Anuj Gautam, Tarun Kumar Yadav, Garrett Smith, Kent E. Seamons, Scott Ruoti |
| 2025 | SP | Security and Privacy Experiences of First- and Second-Generation Pakistani Immigrants to the US: Perceptions, Practices, Challenges, and Parent-Child Dynamics. | Warda Usman, John Sadik, Taha, Ran Elgedawy, Scott Ruoti, Daniel Zappala |
| 2022 | CHI | "It Basically Started Using Me: " An Observational Study of Password Manager Usage. | Sean Oesch, Scott Ruoti, James Simmons, Anuj Gautam |
| 2022 | SOUPS | Improving Password Generation Through the Design of a Password Composition Policy Description Language. | Anuj Gautam, Shan Lalani, Scott Ruoti |
| 2021 | ACSAC | The Emperor's New Autofill Framework: A Security Analysis of Autofill on iOS and Android. | Sean Oesch, Anuj Gautam, Scott Ruoti |
| 2021 | ACSAC | Systematization of Password ManagerUse Cases and Design Paradigms. | James Simmons, Oumar Diallo, Sean Oesch, Scott Ruoti |
| 2021 | FC | SoK: Securing Email - A Stakeholder-Based Analysis. | Jeremy Clark, Paul C. van Oorschot, Scott Ruoti, Kent E. Seamons, Daniel Zappala |
| 2020 | ACSAC | Understanding User Perceptions of Security and Privacy for Group Chat: A Survey of Users in the US and UK. | Sean Oesch, Ruba Abu-Salma, Oumar Diallo, Juliane Krmer, James Simmons, Justin Wu, Scott Ruoti |
| 2018 | SP | A Tale of Two Studies: The Best and Worst of YubiKey Usability. | Joshua Reynolds, Trevor Smith, Ken Reese, Luke Dickinson, Scott Ruoti, Kent E. Seamons |
| 2018 | SOUPS | A Comparative Usability Study of Key Management in Secure Email. | Scott Ruoti, Jeff Andersen, Tyler Monson, Daniel Zappala, Kent E. Seamons |
| 2017 | ICWS | Intrusion Detection with Unsupervised Heterogeneous Ensembles Using Cluster-Based Normalization. | Scott Ruoti, Scott Heidbrink, Mark O'Neill, Eric Gustafson, Yung Ryn Choe |
| 2017 | NSPW | End-to-End Passwords. | Scott Ruoti, Kent E. Seamons |
| 2017 | SOUPS | Weighing Context and Trade-offs: How Suburban Adults Selected Their Online Security Posture. | Scott Ruoti, Tyler Monson, Justin Wu, Daniel Zappala, Kent E. Seamons |
| 2017 | SOUPS | Augmenting Centralized Password Management with Application-Specific Passwords. | Trevor Smith, Scott Ruoti, Kent E. Seamons |
| 2016 | CHI | "We're on the Same Page": A Usability Study of Secure Email Using Pairs of Novice Users. | Scott Ruoti, Jeff Andersen, Scott Heidbrink, Mark O'Neill, Elham Vaziripour, Justin Wu, Daniel Zappala, Kent E. Seamons |
| 2016 | IMC | TLS Proxies: Friend or Foe? | Mark O'Neill, Scott Ruoti, Kent E. Seamons, Daniel Zappala |
| 2016 | NSPW | Content-based security for the web. | Alexander Afanasyev, J. Alex Halderman, Scott Ruoti, Kent E. Seamons, Yingdi Yu, Daniel Zappala, Lixia Zhang |
| 2016 | UIST | Private Webmail 2.0: Simple and Easy-to-Use Secure Email. | Scott Ruoti, Jeff Andersen, Travis Hendershot, Daniel Zappala, Kent E. Seamons |
| 2016 | SOUPS | Strengthening Password-based Authentication. | Scott Ruoti, Jeff Andersen, Kent E. Seamons |
| 2016 | SOUPS | User Attitudes Toward the Inspection of Encrypted Traffic. | Scott Ruoti, Mark O'Neill, Daniel Zappala, Kent E. Seamons |
| 2016 | SOUPS | Standard Metrics and Scenarios for Usable Authentication. | Scott Ruoti, Kent E. Seamons |
| 2015 | WWW | Authentication Melee: A Usability Analysis of Seven Web Authentication Systems. | Scott Ruoti, Brent Roberts, Kent E. Seamons |
| 2014 | CCS | POSTER: TLS Proxies: Friend or Foe? | Mark O'Neill, Scott Ruoti, Kent E. Seamons, Daniel Zappala |
| 2013 | SOUPS | Confused Johnny: when automatic encryption leads to confusion and mistakes. | Scott Ruoti, Nathan Kim, Ben Burgon, Timothy W. van der Horst, Kent E. Seamons |