| 2016 | User-Centered Privacy Communication Design. | Margaret Hagen |
| 2016 | Effect of Cognitive Effort on Password Choice. | Thomas Gro, Kovila P. L. Coopamootoo, Amina Al-Jabri |
| 2016 | How Short Is Too Short? Implications of Length and Framing on the Effectiveness of Privacy Notices. | Joshua Gluck, Florian Schaub, Amy Friedman, Hana Habib, Norman M. Sadeh, Lorrie Faith Cranor, Yuvraj Agarwal |
| 2016 | Do or Do Not, There Is No Try: User Engagement May Not Improve Security Outcomes. | Alain Forget, Sarah Pearman, Jeremy Thomas, Alessandro Acquisti, Nicolas Christin, Lorrie Faith Cranor, Serge Egelman, Marian Harbach, Rahul Telang |
| 2016 | Rethinking Connection Security Indicators. | Adrienne Porter Felt, Robert W. Reeder, Alex Ainslie, Helen Harris, Max Walker, Christopher Thompson, Mustafa Emre Acer, Elisabeth Morant, Sunny Consolvo |
| 2016 | Why Do They Do What They Do?: A Study of What Motivates Users to (Not) Follow Computer Security Advice. | Michael Fagan, Mohammad Maifi Hasan Khan |
| 2016 | Who Are You Now? Fading to Multiple Personas. | Sven Dietrich, Michael Brenner, Katharina Krombholz |
| 2016 | The Privacy Policy Paradox. | Rena Coen, Jennifer King, Richmond Y. Wong |
| 2016 | Productive Security: A Scalable Methodology for Analysing Employee Security Behaviours. | Adam Beautement, Ingolf Becker, Simon Parkin, Kat Krol, M. Angela Sasse |
| 2016 | Lessons Learned from Designing and Evaluating Smart Device-based Authentication for Visually Impaired Users. | Nat Miccael Barbosa, Yang Wang |
| 2016 | Position Paper: Measuring the Impact of Alphabet and Culture on Graphical Passwords. | Adam J. Aviv, Markus Drmuth, Payas Gupta |
| 2016 | Better Privacy Indicators: A New Approach to Quantification of Privacy Policies. | Manar Alohaly, Hassan Takabi |
| 2016 | Addressing Physical Safety, Security, and Privacy for People with Visual Impairments. | Tousif Ahmed, Patrick Shaffer, Kay Connelly, David J. Crandall, Apu Kapadia |
| 2016 | Ask Me Again But Don't Annoy Me: Evaluating Re-authentication Strategies for Smartphones. | Lalit Agarwal, Hassan Khan, Urs Hengartner |
| 2016 | Follow My Recommendations: A Personalized Privacy Assistant for Mobile App Permissions. | Bin Liu, Mads Schaarup Andersen, Florian Schaub, Hazim Almuhimedi, Shikun Zhang, Norman M. Sadeh, Yuvraj Agarwal, Alessandro Acquisti |
| 2016 | An Inconvenient Trust: User Attitudes toward Security and Usability Tradeoffs for Key-Directory Encryption Systems. | Wei Bai, Moses Namara, Yichen Qian, Patrick Gage Kelley, Michelle L. Mazurek, Doowon Kim |
| 2015 | Understanding the Inconsistencies between Text Descriptions and the Use of Privacy-sensitive Resources of Mobile Apps. | Takuya Watanabe, Mitsuaki Akiyama, Tetsuya Sakai, Tatsuya Mori |
| 2015 | Too Much Knowledge? Security Beliefs and Protective Behaviors Among United States Internet Users. | Rick Wash, Emilee J. Rader |
| 2015 | "I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab. | Blase Ur, Fumiko Noma, Jonathan Bees, Sean M. Segreti, Richard Shay, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor |
| 2015 | A Human Capital Model for Mitigating Security Analyst Burnout. | Sathya Chandran Sundaramurthy, Alexandru G. Bardas, Jacob Case, Xinming Ou, Michael Wesch, John McHugh, S. Raj Rajagopalan |
| 2015 | Learning Assigned Secrets for Unlocking Mobile Devices. | Stuart E. Schechter, Joseph Bonneau |
| 2015 | A Design Space for Effective Privacy Notices. | Florian Schaub, Rebecca Balebako, Adam L. Durity, Lorrie Faith Cranor |
| 2015 | Usability and Security Perceptions of Implicit Authentication: Convenient, Secure, Sometimes Annoying. | Hassan Khan, Urs Hengartner, Daniel Vogel |
| 2015 | "My Data Just Goes Everywhere: " User Mental Models of the Internet and Implications for Privacy and Security. | Ruogu Kang, Laura Dabbish, Nathaniel Fruchter, Sara B. Kiesler |
| 2015 | "...No one Can Hack My Mind": Comparing Expert and Non-Expert Security Practices. | Iulia Ion, Rob Reeder, Sunny Consolvo |