Digital Security -- A Question of Perspective. A Large-Scale Telephone Survey with Four At-Risk User Groups
F. Herbert, S. Becker, A. Buckmann, M. Kowalewski, J. Hielscher, Y. Acar, M. Dürmuth, M.A. Sasse, Y. Zou, IEEE Symposium on Security and Privacy. IEEE, New York, NY, USA (2024).

"Always Contribute Back": A Qualitative Study on Security Challenges of the Open Source Supply Chain
D. Wermke, J.H. Klemmer, N. Wöhler, J. Schmüser, H. Sri Ramulu, Y. Acar, S. Fahl, in: 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, IEEE, 2023, pp. 1545–1560.

Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories
A. Krause, J.H. Klemmer, N. Huaman, D. Wermke, Y. Acar, S. Fahl, in: J.A. Calandrino, C. Troncoso (Eds.), 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, USENIX Association, 2023.

It’s like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security
M. Fourné, D. Wermke, W. Enck, S. Fahl, Y. Acar, in: 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, IEEE, 2023, pp. 1527–1544.

"In Eighty Percent of the Cases, I Select the Password for Them": Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya
C.W. Munyendo, Y. Acar, A.J. Aviv, in: 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, IEEE, 2023, pp. 570–587.

Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations
T. Kohno, Y. Acar, W. Loh, CoRR abs/2302.14326 (2023).

A World Full of Privacy and Security (Mis)conceptions? Findings of a Representative Survey in 12 Countries
F. Herbert, S. Becker, L. Schaewitz, J. Hielscher, M. Kowalewski, M.A. Sasse, Y. Acar, M. Dürmuth, in: A. Schmidt, K. Väänänen, T. Goyal, P.O. Kristensson, A. Peters, S. Mueller, J.R. Williamson, M.L. Wilson (Eds.), Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems, CHI 2023, Hamburg, Germany, April 23-28, 2023, ACM, 2023, p. 582:1–582:23.

"We are a startup to the core": A qualitative interview study on the security and privacy development practices in Turkish software startups
D. Keküllüoglu, Y. Acar, in: 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, IEEE, 2023, pp. 2015–2031.

"Oh yes! over-preparing for meetings is my jam :)": The Gendered Experiences of System Administrators
M. Kaur, H. Sri Ramulu, Y. Acar, T. Fiebig, Proc. ACM Hum. Comput. Interact. 7 (2023) 1–38.

 Summit 2202-09: Industry Secure Suppy Chain Summit
M. Tran, Y. Acar, M. Cucker, W. Enck, A. Kapravelos, C. Kästner, L.A. Williams, CoRR abs/2307.15642 (2023).

 Summit 2023-02: Industry Secure Supply Chain Summit
T. Dunlap, Y. Acar, M. Cucker, W. Enck, A. Kapravelos, C. Kästner, L.A. Williams, CoRR abs/2307.16557 (2023).

 Summit 2023-06: Government Secure Supply Chain Summit
W. Enck, Y. Acar, M. Cukier, A. Kapravelos, C. Kästner, L.A. Williams, CoRR abs/2308.06850 (2023).

"Security is not my field, I’m a stats guy": A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry
J. Mink, H. Kaur, J. Schmüser, S. Fahl, Y. Acar, in: J.A. Calandrino, C. Troncoso (Eds.), 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, USENIX Association, 2023.

Lost and not Found: An Investigation of Recovery Methods for Multi-Factor Authentication
S. Amft, S. Höltervennhoff, N. Huaman, A. Krause, L. Simko, Y. Acar, S. Fahl, CoRR abs/2306.09708 (2023).

"Would You Give the Same Priority to the Bank and a Game? I Do Not!" Exploring Credential Management Strategies and Obstacles during Password Manager Setup
S. Amft, S. Höltervennhoff, N. Huaman, Y. Acar, S. Fahl, in: P.G. Kelley, A. Kapadia (Eds.), Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023, USENIX Association, 2023, pp. 171–190.

"I wouldn’t want my unsafe code to run my pacemaker": An Interview Study on the Use, Comprehension, and Perceived Risks of Unsafe Rust
S. Höltervennhoff, P. Klostermeyer, N. Wöhler, Y. Acar, S. Fahl, in: J.A. Calandrino, C. Troncoso (Eds.), 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, USENIX Association, 2023.

Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations
T. Kohno, Y. Acar, W. Loh, in: J.A. Calandrino, C. Troncoso (Eds.), 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, USENIX Association, 2023.

Who Comes Up with this Stuff? Interviewing Authors to Understand How They Produce Security Advice
L. Neil, H. Sri Ramulu, Y. Acar, B. Reaves, in: Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023, USENIX Association, 2023, pp. 283–299.

Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender
E. Bouma-Sims, Y. Acar, Proc. ACM Hum. Comput. Interact. 7 (2023) 1–31.

Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender
E. Bouma-Sims, Y. Acar, CoRR abs/2302.05351 (2023).