64 citations · 157 across the 17 of their papers we have counts for
17 papers
Who Falls for SMiSh? Learning Through Survey Data Where to Best Target Awareness Training for Mobile Messaging Attacks
Cori Faklaris, Sarah Tabassum, Heather Richter Lipford
As mobile phone adoption has surged, so have scams involving these devices. One such scam, known as SMiShing (or smishing) after Short Message Service (SMS), involves fraudsters se…
Beyond the Legal Lens: A Sociotechnical Taxonomy of Lived Privacy Incidents and Harms
Kirsten Chapman, Garrett Smith, Kaitlyn Klabacka +8
To understand how privacy incidents lead to harms, HCI researchers have historically leveraged legal frameworks. However, these frameworks expect acute, tangible harms and thus may…
The Everyday Security of Living with Conflict
Jessica McClearn, Reem Talhouk, Rikke Bjerg Jensen
When `cyber' is used as a prefix, attention is typically drawn to the technological and spectacular aspects of war and conflict -- and, by extension, security. We offer a different…
Proof-of-TBI -- Fine-Tuned Vision Language Model Consortium and OpenAI-o3 Reasoning LLM-Based Medical Diagnosis Support System for Mild Traumatic Brain Injury (TBI) Prediction
Ross Gore, Eranga Bandara, Sachin Shetty +10
Mild Traumatic Brain Injury (TBI) detection presents significant challenges due to the subtle and often ambiguous presentation of symptoms in medical imaging, making accurate diagn…
Examining Caregiving Roles to Differentiate the Effects of Using a Mobile App for Community Oversight for Privacy and Security
Mamtaj Akter, Jess Kropczynski, Heather Lipford +1
We conducted a 4-week field study with 101 smartphone users who self-organized into 22 small groups of family, friends, and neighbors to use ``CO-oPS,'' a mobile app for co-managin…
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns
Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik +10
Following the recent release of AI assistants, such as OpenAI's ChatGPT and GitHub Copilot, the software industry quickly utilized these tools for software development tasks, e.g.,…
CO-oPS: A Mobile App for Community Oversight of Privacy and Security
Mamtaj Akter, Leena Alghamdi, Dylan Gillespie +4
Smartphone users install numerous mobile apps that require access to different information from their devices. Much of this information is very sensitive, and users often struggle…
Preliminary Results from a U.S. Demographic Analysis of SMiSh Susceptibility
Cori Faklaris, Heather Richter Lipford, Sarah Tabassum
As adoption of mobile phones has skyrocketed, so have scams involving them. The text method is called SMiShing, (aka SMShing, or smishing) in which a fraudster sends a phishing lin…
Evaluating the Impact of Community Oversight for Managing Mobile Privacy and Security
Mamtaj Akter, Madiha Tabassum, Nazmus Sakib Miazi +4
Mobile privacy and security can be a collaborative process where individuals seek advice and help from their trusted communities. To support such collective privacy and security ma…
It Takes a Village: A Case for Including Extended Family Members in the Joint Oversight of Family-based Privacy and Security for Mobile Smartphones
Mamtaj Akter, Leena Alghamdi, Jess Kropczynski +2
We conducted a user study with 19 parent-teen dyads to understand the perceived benefits and drawbacks of using a mobile app that allows them to co-manage mobile privacy, safety, a…
Co-designing Community-based Sharing of Smarthome Devices for the Purpose of Co-monitoring In-home Emergencies
Leena Alghamdi, Mamtaj Akter, Jess Kropczynski +2
We conducted 26 co-design interviews with 50 smarthome device owners to understand the perceived benefits, drawbacks, and design considerations for developing a smarthome system th…
Security policy audits: why and how
Arvind Narayanan, Kevin Lee
Information security isn't just about software and hardware -- it's at least as much about policies and processes. But the research community overwhelmingly focuses on the former o…
From Parental Control to Joint Family Oversight: Can Parents and Teens Manage Mobile Online Safety and Privacy as Equals?
Mamtaj Akter, Amy Godfrey, Jess Kropczynski +2
Our research aims to highlight and alleviate the complex tensions around online safety, privacy, and smartphone usage in families so that parents and teens can work together to bet…
Automated Detecting and Repair of Cross-Site Scripting Vulnerabilities
Mahmoud Mohammadi, Bei-Tseng Chu, Heather Richter Lipford
The best practice to prevent Cross Site Scripting (XSS) attacks is to apply encoders to sanitize untrusted data. To balance security and functionality, encoders should be applied t…
Detecting Cross-Site Scripting Vulnerabilities through Automated Unit Testing
Mahmoud Mohammadi, Bill Chu, Heather Richter Lipford
The best practice to prevent Cross Site Scripting (XSS) attacks is to apply encoders to sanitize untrusted data. To balance security and functionality, encoders should be applied t…
Automatic Web Security Unit Testing: XSS Vulnerability Detection
Mahmoud Mohammadi, Bill Chu, Heather Richter Lipford +1
Integrating security testing into the workflow of software developers not only can save resources for separate security testing but also reduce the cost of fixing security vulnerab…
Using Unit Testing to Detect Sanitization Flaws
Mahmoud Mohammadi, Bill Chu, Heather Richter Lipford
Input sanitization mechanisms are widely used to mitigate vulnerabilities to injection attacks such as cross-site scripting. Static analysis tools and techniques commonly used to e…