90 citations · 254 across the 23 of their papers we have counts for
25 papers
Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks
Franziska Roesner, Tadayoshi Kohno
Thompson's "Reflections on Trusting Trust" showed that a compiler can be poisoned to reinsert its own backdoor, so that even recompiling clean source reproduces the Trojan. Today,…
How Agents Ask for Permission: User Permissions for AI Agents, from Interfaces to Enforcement
Alexandra E. Michael, Franziska Roesner
As AI agents grow in prevalence, so too do their risks to users, creating a need for robust and usable systems for agent permissions. Many recent proposals implement product-level…
Janus: a Playground for User-Involved Agentic Permission Management
Natalie Grace Brigham, Eugene Bagdasarian, Tadayoshi Kohno +1
AI agents that autonomously execute tool calls on a user's behalf raise pressing questions about permission management: what role could users play, and what role should they play?…
Is This AI? Longitudinal Analysis of Strategies Used for AI Detection on Two Subreddits
Christina Yeung, Galen Weld, Jaron Mink +1
As AI-generated content (e.g., "slop") becomes more prevalent online, people are developing strategies to attempt to identify it (or, conversely, to gain confidence that something…
Extending the Formalism and Theoretical Foundations of Cryptography to AI
Federico Villa, F. Betül Durak, Tadayoshi Kohno +2
Recent progress in (Large) Language Models (LMs) has enabled the development of autonomous LM-based agents capable of executing complex tasks with minimal supervision. These agents…
Towards Automating Data Access Permissions in AI Agents
Yuhao Wu, Ke Yang, Franziska Roesner +3
As AI agents attempt to autonomously act on users' behalf, they raise transparency and control issues. We argue that permission-based access control is indispensable in providing m…
SoK: Advances and Open Problems in Web Tracking
Yash Vekaria, Yohan Beugin, Shaoor Munir +11
Web tracking is a pervasive and opaque practice that enables personalized advertising, retargeting, and conversion tracking. Over time, it has evolved into a sophisticated and inva…
Exploring Political Ads on News and Media Websites During the 2024 U.S. Elections
Emi Yoshikawa, Franziska Roesner
Building on recent work studying content in the online advertising ecosystem, including our own prior study of political ads on the web during the 2020 U.S. elections, we analyze p…
Understanding Help-Seeking and Help-Giving on Social Media for Image-Based Sexual Abuse
Miranda Wei, Sunny Consolvo, Patrick Gage Kelley +7
Image-based sexual abuse (IBSA), like other forms of technology-facilitated abuse, is a growing threat to people's digital safety. Attacks include unwanted solicitations for sexual…
Developing Story: Case Studies of Generative AI's Use in Journalism
Natalie Grace Brigham, Chongjiu Gao, Tadayoshi Kohno +2
Journalists are among the many users of large language models (LLMs). To better understand the journalist-AI interactions, we conduct a study of LLM usage by two news agencies thro…
SoK (or SoLK?): On the Quantitative Study of Sociodemographic Factors and Computer Security Behaviors
Miranda Wei, Jaron Mink, Yael Eiger +3
Researchers are increasingly exploring how gender, culture, and other sociodemographic factors correlate with user computer security and privacy behaviors. To more holistically und…
IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems
Yuhao Wu, Franziska Roesner, Tadayoshi Kohno +2
Large language models (LLMs) extended as systems, such as ChatGPT, have begun supporting third-party applications. These LLM apps leverage the de facto natural language-based autom…
LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins
Umar Iqbal, Tadayoshi Kohno, Franziska Roesner
Large language model (LLM) platforms, such as ChatGPT, have recently begun offering an app ecosystem to interface with third-party services on the internet. While these apps extend…
"There's so much responsibility on users right now:" Expert Advice for Staying Safer From Hate and Harassment
Miranda Wei, Sunny Consolvo, Patrick Gage Kelley +3
Online hate and harassment poses a threat to the digital safety of people globally. In light of this risk, there is a need to equip as many people as possible with advice to stay s…
Analyzing User Engagement with TikTok's Short Format Video Recommendations using Data Donations
Savvas Zannettou, Olivia-Nemes Nemeth, Oshrat Ayalon +4
Short-format videos have exploded on platforms like TikTok, Instagram, and YouTube. Despite this, the research community lacks large-scale empirical studies into how people engage…
Tracking, Profiling, and Ad Targeting in the Alexa Echo Smart Speaker Ecosystem
Umar Iqbal, Pouneh Nikkhah Bahrami, Rahmadi Trimananda +7
Smart speakers collect voice commands, which can be used to infer sensitive information about users. Given the potential for privacy harms, there is a need for greater transparency…
Understanding Privacy Attitudes and Concerns Towards Remote Communications During the COVID-19 Pandemic
Pardis Emami-Naeini, Tiona Francisco, Tadayoshi Kohno +1
Since December 2019, the COVID-19 pandemic has caused people around the world to exercise social distancing, which has led to an abrupt rise in the adoption of remote communication…
Misinfo Reaction Frames: Reasoning about Readers' Reactions to News Headlines
Saadia Gabriel, Skyler Hallinan, Maarten Sap +4
Even to a simple and short news headline, readers react in a multitude of ways: cognitively (e.g. inferring the writer's intent), emotionally (e.g. feeling distrust), and behaviora…
Social Media COVID-19 Misinformation Interventions Viewed Positively, But Have Limited Impact
Christine Geeng, Tiona Francisco, Jevin West +1
Amidst COVID-19 misinformation spreading, social media platforms like Facebook and Twitter rolled out design interventions, including banners linking to authoritative resources and…
COVID-19 Contact Tracing and Privacy: A Longitudinal Study of Public Opinion
Lucy Simko, Jack Lucas Chang, Maggie Jiang +3
There is growing use of technology-enabled contact tracing, the process of identifying potentially infected COVID-19 patients by notifying all recent contacts of an infected person…
Making Distributed Mobile Applications SAFE: Enforcing User Privacy Policies on Untrusted Applications with Secure Application Flow Enforcement
Adriana Szekeres, Irene Zhang, Katelin Bailey +6
Today's mobile devices sense, collect, and store huge amounts of personal information, which users share with family and friends through a wide range of applications. Once users gi…
COVID-19 Contact Tracing and Privacy: Studying Opinion and Preferences
Lucy Simko, Ryan Calo, Franziska Roesner +1
There is growing interest in technology-enabled contact tracing, the process of identifying potentially infected COVID-19 patients by notifying all recent contacts of an infected p…
Defending Against Neural Fake News
Rowan Zellers, Ari Holtzman, Hannah Rashkin +4
Recent progress in natural language generation has raised dual-use concerns. While applications like summarization and translation are positive, the underlying technology also migh…
Technology-Enabled Disinformation: Summary, Lessons, and Recommendations
John Akers, Gagan Bansal, Gabriel Cadamuro +12
Technology is increasingly used -- unintentionally (misinformation) or intentionally (disinformation) -- to spread false information at scale, with potentially broad-reaching socie…