61 citations · 209 across the 13 of their papers we have counts for
13 papers
Continuous Discovery of Vulnerabilities in LLM Serving Systems with Fuzzing
Yunze Zhao, Yibo Zhao, Yuchen Zhang +2
LLM inference and serving systems have become security-critical infrastructure; however, many of their most concerning failures arise from the serving layer rather than from model…
As Advertised? Understanding the Impact of Influencer VPN Ads
Omer Akgul, Richard Roberts, Emma Shroyer +2
Influencer VPN ads (sponsored segments) on YouTube often disseminate misleading information about both VPNs, and security & privacy more broadly. However, it remains unclear how (o…
A Decade of Privacy-Relevant Android App Reviews: Large Scale Trends
Omer Akgul, Sai Teja Peddinti, Nina Taft +4
We present an analysis of 12 million instances of privacy-relevant reviews publicly visible on the Google Play Store that span a 10 year period. By leveraging state of the art NLP…
SoK: Safer Digital-Safety Research Involving At-Risk Users
Rosanna Bellini, Emily Tseng, Noel Warford +9
Research involving at-risk users -- that is, users who are more likely to experience a digital attack or to be disproportionately affected when harm from such an attack occurs -- c…
Bug Hunters' Perspectives on the Challenges and Benefits of the Bug Bounty Ecosystem
Omer Akgul, Taha Eghtesad, Amit Elazari +5
Although researchers have characterized the bug-bounty ecosystem from the point of view of platforms and programs, minimal effort has been made to understand the perspectives of th…
SoK: A Framework for Unifying At-Risk User Research
Noel Warford, Tara Matthews, Kaitlyn Yang +7
At-risk users are people who experience elevated digital security, privacy, and safety threats because of what they do, who they are, where they are, or who they are with. In this…
Garbage Collection Makes Rust Easier to Use: A Randomized Controlled Trial of the Bronze Garbage Collector
Michael Coblenz, Michelle Mazurek, Michael Hicks
Rust is a general-purpose programming language that is both type- and memory-safe. Rust does not use a garbage collector, but rather achieves these properties through a sophisticat…
Strategies and Perceived Risks of Sending Sensitive Documents
Noel Warford, Collins W. Munyendo, Ashna Mediratta +2
People are frequently required to send documents, forms, or other materials containing sensitive data (e.g., personal information, medical records, financial data) to remote partie…
Measuring Non-Expert Comprehension of Machine Learning Fairness Metrics
Debjani Saha, Candice Schumann, Duncan C. McElfresh +3
Bias in machine learning has manifested injustice in several areas, such as medicine, hiring, and criminal justice. In response, computer scientists have developed myriad definitio…
An Observational Investigation of Reverse Engineers' Processes
Daniel Votipka, Seth M. Rabin, Kristopher Micinski +2
Reverse engineering is a complex process essential to software-security tasks such as vulnerability discovery and malware analysis. Significant research and engineering effort has…
Build It, Break It, Fix It: Contesting Secure Development
James Parker, Michael Hicks, Andrew Ruef +5
Typical security contests focus on breaking or mitigating the impact of buggy systems. We present the Build-it, Break-it, Fix-it (BIBIFI) contest, which aims to assess the ability…
Dancing Pigs or Externalities? Measuring the Rationality of Security Decisions
Elissa M. Redmiles, Michelle L. Mazurek, John P. Dickerson
Accurately modeling human decision-making in security is critical to thinking about when, why, and how to recommend that users adopt certain secure behaviors. In this work, we cond…
Build It, Break It, Fix It: Contesting Secure Development
Andrew Ruef, Michael Hicks, James Parker +3
Typical security contests focus on breaking or mitigating the impact of buggy systems. We present the Build-it Break-it Fix-it BIBIFI contest which aims to assess the ability to se…