| 2020 | Replication: On the Ecological Validity of Online Security Developer Studies: Exploring Deception in a Password-Storage Study with Freelancers. | Anastasia Danilova, Alena Naiakshina, Johanna Deuter, Matthew Smith |
| 2020 | How Risky Are Real Users' IFTTT Applets? | Camille Cobb, Milijana Surbatovich, Anna Kawakami, Mahmood Sharif, Lujo Bauer, Anupam Das, Limin Jia |
| 2020 | Innovation Inaction or In Action? The Role of User Experience in the Security and Privacy Design of Smart Home Cameras. | George Chalhoub, Ivan Flechais, Norbert Nthala, Ruba Abu-Salma |
| 2020 | Replication: Why We Still Can't Browse in Peace: On the Uniqueness and Reidentifiability of Web Browsing Histories. | Sarah Bird, Ilana Segall, Martin Lopatka |
| 2020 | Do Privacy and Security Matter to Everyone? Quantifying and Clustering User-Centric Considerations About Smart Home Device Adoption. | Nat M. Barbosa, Zhuohao Zhang, Yang Wang |
| 2020 | "You've Got Your Nice List of Bugs, Now What?" Vulnerability Discovery and Management Processes in the Wild. | Noura Alomar, Primal Wijesekera, Edward Qiu, Serge Egelman |
| 2020 | An Exploratory Study of Hardware Reverse Engineering - Technical and Cognitive Processes. | Steffen Becker, Carina Wiesen, Nils Albartus, Nikol Rummel, Christof Paar |
| 2020 | Why Can't Johnny Fix Vulnerabilities: A Usability Evaluation of Static Analysis Tools for Security. | Justin Smith, Lisa Nguyen Quang Do, Emerson R. Murphy-Hill |
| 2019 | Why people (don't) use password managers effectively. | Shikun Zhang, Sarah Pearman, Lujo Bauer, Nicolas Christin |
| 2019 | "Something isn't secure, but I'm not sure how that translates into a problem": Promoting autonomy by designing for understanding in Signal. | Justin Wu, Cyrus Gattrell, Devon Howard, Jake Tyler, Elham Vaziripour, Daniel Zappala, Kent E. Seamons |
| 2019 | System Administrators Prefer Command Line Interfaces, Don't They? An Exploratory Study of Firewall Interfaces. | Artem Voronkov, Leonardo A. Martucci, Stefan Lindskog |
| 2019 | The Fog of Warnings: How Non-essential Notifications Blur with Security Warnings. | Anthony Vance, David Eargle, Jeffrey L. Jenkins, C. Brock Kirwan, Bonnie Brinton Anderson |
| 2019 | I don't own the data": End User Perceptions of Smart Home Device Data Practices and Risks. | Madiha Tabassum, Tomasz Kosinski, Heather Richter Lipford |
| 2019 | "I was told to buy a software or lose my computer. I ignored it": A study of ransomware. | Camelia Simoiu, Joseph Bonneau, Christopher Gates, Sharad Goel |
| 2019 | A Usability Study of Five Two-Factor Authentication Methods. | Ken Reese, Trevor Smith, Jonathan Dutson, Jonathan Armknecht, Jacob Cameron, Kent E. Seamons |
| 2019 | From Usability to Secure Computing and Back Again. | Lucy Qin, Andrei Lapets, Frederick Jansen, Peter Flockhart, Kinan Dak Albab, Ira Globus-Harris, Shannon Roberts, Mayank Varia |
| 2019 | Usability Smells: An Analysis of Developers' Struggle With Crypto Libraries. | Nikhil Patnaik, Joseph Hallett, Awais Rashid |
| 2019 | "We Can't Live Without Them!" App Developers' Adoption of Ad Networks and Their Considerations of Consumer Risks. | Abraham H. Mhaidli, Yixin Zou, Florian Schaub |
| 2019 | Certified Phishing: Taking a Look at Public Key Certificates of Phishing Websites. | Ulrike Meyer, Vincent Drury |
| 2019 | Communicating Device Confidence Level and Upcoming Re-Authentications in Continuous Authentication Systems on Mobile Devices. | Lukas Mecke, Sarah Delgado Rodriguez, Daniel Buschek, Sarah Prange, Florian Alt |
| 2019 | Exploring Intentional Behaviour Modifications for Password Typing on Mobile Touchscreen Devices. | Lukas Mecke, Daniel Buschek, Mathias Kiermeier, Sarah Prange, Florian Alt |
| 2019 | Personal Information Leakage by Abusing the GDPR 'Right of Access'. | Mariano Di Martino, Pieter Robyns, Winnie Weyts, Peter Quax, Wim Lamotte, Ken Andries |
| 2019 | Keepers of the Machines: Examining How System Administrators Manage Software Updates For Multiple Machines. | Frank Li, Lisa Rogers, Arunesh Mathur, Nathan Malkin, Marshini Chetty |
| 2019 | Enhancing Privacy through an Interactive On-demand Incremental Information Disclosure Interface: Applying Privacy-by-Design to Record Linkage. | Hye-Chung Kum, Eric D. Ragan, Gurudev Ilangovan, Mahin Ramezani, Qinbo Li, Cason D. Schmit |
| 2019 | Cooperative Privacy and Security: Learning from People with Visual Impairments and Their Allies. | Jordan Hayes, Smirity Kaushik, Charlotte Emily Price, Yang Wang |