| 2008 | Evaluating assistance of natural language policy authoring. | Kami Vaniea, Clare-Marie Karat, Joshua B. Gross, John Karat, Carolyn Brodie |
| 2008 | A user study of off-the-record messaging. | Ryan Stedman, Kayo Yoshida, Ian Goldberg |
| 2008 | Universal device pairing using an auxiliary device. | Nitesh Saxena, Md. Borhan Uddin, Jonathan Voris |
| 2008 | Personal knowledge questions for fallback authentication: security questions in the era of Facebook. | Ariel Rabkin |
| 2008 | Expressions of expertness: the virtuous circle of natural language for access control policy specification. | Philip Inglesant, Martina Angela Sasse, David W. Chadwick, Lei Lei Shi |
| 2008 | Use Your Illusion: secure authentication usable anywhere. | Eiji Hayashi, Rachna Dhamija, Nicolas Christin, Adrian Perrig |
| 2008 | Improving text passwords through persuasion. | Alain Forget, Sonia Chiasson, Paul C. van Oorschot, Robert Biddle |
| 2008 | Analyzing websites for user-visible security design flaws. | Laura Falk, Atul Prakash, Kevin Borders |
| 2008 | Securing passfaces for description. | Paul Dunphy, James Nicholson, Patrick Olivier |
| 2008 | Evaluating the usability of usage controls in electronic collaboration. | Jos Carlos Brustoloni, Ricardo Villamarn-Salomn, Peter Djalaliev, David Kyle |
| 2007 | Detecting, analyzing and responding to security incidents: a qualitative analysis. | Rodrigo Werlinger, David Botta, Konstantin Beznosov |
| 2007 | Examining privacy and disclosure in a social networking community. | Katherine Strater, Heather Richter |
| 2007 | Anti-Phishing Phil: the design and evaluation of a game that teaches people not to fall for phish. | Steve Sheng, Bryant Magnien, Ponnurangam Kumaraguru, Alessandro Acquisti, Lorrie Faith Cranor, Jason I. Hong, Elizabeth Nunge |
| 2007 | Seven privacy worries in ubiquitous social computing. | Sara Motahari, Constantine N. Manikopoulos, Starr Roxanne Hiltz, Quentin Jones |
| 2007 | A survey of privacy concerns with dynamic collaborator discovery capabilities. | Robert L. Marchant |
| 2007 | Graphical passwords & qualitative spatial relations. | Di Lin, Paul Dunphy, Patrick Olivier, Jeff Yan |
| 2007 | Defeat spyware with anti-screen capture technology using visual persistence. | Johnny Lim |
| 2007 | Facemail: showing faces of recipients to prevent misdirected email. | Eric Lieberman, Robert C. Miller |
| 2007 | Reducing shoulder-surfing by using gaze-based password entry. | Manu Kumar, Tal Garfinkel, Dan Boneh, Terry Winograd |
| 2007 | Bitfrost: the one laptop per child security model. | Ivan Krstic, Simson L. Garfinkel |
| 2007 | Measuring privacy loss and the impact of privacy protection in web browsing. | Balachander Krishnamurthy, Delfina Malandrino, Craig E. Wills |
| 2007 | Tracking website data-collection and privacy practices with the iWatch web crawler. | Carlos Jensen, Chandan Sarkar, Christian Jensen, Colin Potts |
| 2007 | A usability evaluation of a home monitoring system. | Rajah James, Woo Tae Kim, Aleecia M. McDonald, Robert McGuire |
| 2007 | Secure software installation in a mobile environment. | Andreas P. Heiner, N. Asokan |
| 2007 | Perception and acceptance of fingerprint biometric technology. | Rosa R. Heckle, Andrew S. Patrick, A. Ant Ozok |