14 citations · 27 across the 13 of their papers we have counts for
14 papers
CAPTCHAs in the Agentic Era: Solvers That Learn from Every Encounter
Oguzhan Salman, Kemal Bicakci
Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the h…
Making AI-Assisted Grant Evaluation Auditable without Exposing the Model
Kemal Bicakci
Public agencies are beginning to consider large language models (LLMs) as decision-support tools for grant evaluation. This creates a practical governance problem: the model and sc…
When Handshakes Tell the Truth: Detecting Web Bad Bots via TLS Fingerprints
Ghalia Jarad, Kemal Bicakci
Automated traffic continued to surpass human-generated traffic on the web, and a rising proportion of this automation was explicitly malicious. Evasive bots could pretend to be rea…
QES-Backed Virtual FIDO2 Authenticators: Architectural Options for Secure, Synchronizable WebAuthn Credentials
Kemal Bicakci, Fatih Mehmet Varli, Muhammet Emir Korkmaz +1
FIDO2 and the WebAuthn standard offer phishing-resistant, public-key based authentication but traditionally rely on device-bound cryptographic keys that are not naturally portable…
Usability of Token-based and Remote Electronic Signatures: A User Experience Study
Omer Ege, Mustafa Cagal, Kemal Bicakci
As electronic signatures (e-signatures) become increasingly integral to secure digital transactions, understanding their usability and security perception from an end-user perspect…
Decentralized Vulnerability Disclosure via Permissioned Blockchain: A Secure, Transparent Alternative to Centralized CVE Management
Novruz Amirov, Kemal Bicakci
This paper proposes a decentralized, blockchain-based system for the publication of Common Vulnerabilities and Exposures (CVEs), aiming to mitigate the limitations of the current c…
Evaluating the Usability of Qualified Electronic Signatures: Systematized Use Cases and Design Paradigms
Mustafa Cagal, Kemal Bicakci
Despite being legally equivalent to handwritten signatures, Qualified Electronic Signatures (QES) have not yet achieved significant market success. QES offer substantial potential…
ROSTAM: A Passwordless Web Single Sign-on Solution Mitigating Server Breaches and Integrating Credential Manager and Federated Identity Systems
Amin Mahnamfar, Kemal Bicakci, Yusuf Uzunay
The challenge of achieving passwordless user authentication is real given the prevalence of web applications that keep asking passwords. Complicating this issue further, in an ente…
Is FIDO2 Passwordless Authentication a Hype or for Real?: A Position Paper
Kemal Bicakci, Yusuf Uzunay
Operating system and browser support that comes with the FIDO2 standard and the biometric user verification options increasingly available on smart phones has excited everyone, esp…
Should Users Trust Their Android Devices? A Scoring System for Assessing Security and Privacy Risks of Pre-Installed Applications
Abdullah Ozbay, Kemal Bicakci
Android devices are equipped with many pre-installed applications which have the capability of tracking and monitoring users. Although applications coming pre-installed pose a grea…
Analyzing Turkish F and Turkish E keyboard layouts using learning curves
Mevlut Serkan Tok, Osman Tufan Tekin, Kemal Bicakci
The F-layout was introduced in 1955 and eventually enforced as a national standard as a replacement to the popular QWERTY keyboard layout in Turkey. In a more recent work, another…
TwinCloud: Secure Cloud Sharing Without Explicit Key Management
Kemal Bicakci, Davut Deniz Yavuz, Sezin Gurkan
With the advent of cloud technologies, there is a growing number of easy-to-use services to store files and share them with other cloud users. By providing security features, cloud…
Trust-in-the-Middle: Towards Establishing Trustworthiness of Authentication Proxies using Trusted Computing
Yusuf Uzunay, Kemal Bicakci
Authentication proxies, which store users' secret credentials and submit them to servers on their behalf, offer benefits with respect to security of the authentication and usabilit…
Could We Distinguish Child Users from Adults Using Keystroke Dynamics?
Yasin Uzun, Kemal Bicakci, Yusuf Uzunay
Significant portion of contemporary computer users are children, who are vulnerable to threats coming from the Internet. To protect children from such threats, in this study, we in…