48 citations · 107 across the 8 of their papers we have counts for
9 papers
Automatic Detection of Fake Key Attacks in Secure Messaging
Tarun Kumar Yadav, Devashish Gosain, Amir Herzberg +2
Popular instant messaging applications such as WhatsApp and Signal provide end-to-end encryption for billions of users. They rely on a centralized, application-specific server to d…
SoK: Securing Email -- A Stakeholder-Based Analysis (Extended Version)
Jeremy Clark, P. C. van Oorschot, Scott Ruoti +2
While email is the most ubiquitous and interoperable form of online communication today, it was not conceived with strong security guarantees, and the ensuing security enhancements…
TrustBase: An Architecture to Repair and Strengthen Certificate-based Authentication
Mark O'Neill, Scott Heidbrink, Jordan Whitehead +4
We describe TrustBase, an architecture that provides certificate-based authentication as an operating system service. TrustBase enforces best practices for certificate validation f…
MessageGuard: A Browser-based Platform for Usable, Content-Based Encryption Research
Scott Ruoti, Jeff Andersen, Tyler Monson +2
This paper describes MessageGuard, a browser-based platform for research into usable content-based encryption. MessageGuard is designed to enable collaboration between security and…
Why Johnny Still, Still Can't Encrypt: Evaluating the Usability of a Modern PGP Client
Scott Ruoti, Jeff Andersen, Daniel Zappala +1
This paper presents the results of a laboratory study involving Mailvelope, a modern PGP client that integrates tightly with existing webmail providers. In our study, we brought in…
"We're on the Same Page": A Usability Study of Secure Email Using Pairs of Novice Users
Scott Ruoti, Jeff Andersen, Scott Heidbrink +5
Secure email is increasingly being touted as usable by novice users, with a push for adoption based on recent concerns about government surveillance. To determine whether secure em…
Private Webmail 2.0: Simple and Easy-to-Use Secure Email
Scott Ruoti, Jeff Andersen, Travis Hendershot +2
Private Webmail 2.0 (Pwm 2.0) improves upon the current state of the art by increasing the usability and practical security of secure email for ordinary users. More users are able…
User Attitudes Toward the Inspection of Encrypted Traffic
Scott Ruoti, Mark O'Neil, Daniel Zappala +1
This paper reports the results of a survey of 1,976 individuals regarding their opinions on TLS inspection, a controversial technique that can be used for both benevolent and malic…
TLS Proxies: Friend or Foe?
Mark O'Neill, Scott Ruoti, Kent Seamons +1
The use of TLS proxies to intercept encrypted traffic is controversial since the same mechanism can be used for both benevolent purposes, such as protecting against malware, and fo…