Keküllüoglu, D., &; Acar, Y. (2023). “We are a startup to the core”: A qualitative interview study on the security and privacy development practices in Turkish software startups. 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2015–2031.https://doi.org/10.1109/SP46215.2023.10179339 

Bouma-Sims, E., &; Acar, Y. (2023). Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender. Proc. ACM Hum. Comput. Interact., 7(CSC), 1–31.https://doi.org/10.1145/3579461 

Kohno, T., Acar, Y., &; Loh, W. (2023). Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations. CoRR, abs/2302.14326.https://doi.org/10.48550/arXiv.2302.14326 

Amft, S., Höltervennhoff, S., Huaman, N., Acar, Y., &; Fahl, S. (2023). “Would You Give the Same Priority to the Bank and a Game? I Do Not!” Exploring Credential Management Strategies and Obstacles during Password Manager Setup. In P. G. Kelley &; A. Kapadia (Eds.), Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023 (pp. 171–190). USENIX Association.

Höltervennhoff, S., Klostermeyer, P., Wöhler, N., Acar, Y., &; Fahl, S. (2023). “I wouldn’t want my unsafe code to run my pacemaker”: An Interview Study on the Use, Comprehension, and Perceived Risks of Unsafe Rust. In J. A. Calandrino &; C. Troncoso (Eds.), 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023. USENIX Association.

Mink, J., Kaur, H., Schmüser, J., Fahl, S., &; Acar, Y. (2023). “Security is not my field, I’m a stats guy”: A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry. In J. A. Calandrino &; C. Troncoso (Eds.), 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023. USENIX Association.

Fourné, M., Wermke, D., Enck, W., Fahl, S., &; Acar, Y. (2023). It’s like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security. 2023 IEEE Symposium on Security and Privacy (SP).https://doi.org/10.1109/sp46215.2023.10179320 

Kaur, M., Sri Ramulu, H., Acar, Y., &; Fiebig, T. (2023). “Oh yes! over-preparing for meetings is my jamf:)”: The Gendered Experiences of System Administrators. Proc. ACM Hum. Comput. Interact., 7(CSC), 1–38.https://doi.org/10.1145/3579617 

Amft, S., Höltervennhoff, S., Huaman, N., Krause, A., Simko, L., Acar, Y., &; Fahl, S. (2023). Lost and not Found: An Investigation of Recovery Methods for Multi-Factor Authentication. CoRR, abs/2306.09708.https://doi.org/10.48550/arXiv.2306.09708 

Tran, M., Acar, Y., Cucker, M., Enck, W., Kapravelos, A., Kästner, C., &; Williams, L. A. (2023).https://doi.org/10.48550/arXiv.2307.15642__Summit 2202-09: Industry Secure Suppy Chain Summit. CoRR, abs/2307.15642.https://doi.org/10.48550/arXiv.2307.15642 

Dunlap, T., Acar, Y., Cucker, M., Enck, W., Kapravelos, A., Kästner, C., &; Williams, L. A. (2023).https://doi.org/10.48550/arXiv.2307.16557__Summit 2023-02: Industry Secure Supply Chain Summit. CoRR, abs/2307.16557.https://doi.org/10.48550/arXiv.2307.16557 

Enck, W., Acar, Y., Cukier, M., Kapravelos, A., Kästner, C., &; Williams, L. A. (2023).https://doi.org/10.48550/arXiv.2308.06850__Summit 2023-06: Government Secure Supply Chain Summit. CoRR, abs/2308.06850.https://doi.org/10.48550/arXiv.2308.06850 

Kohno, T., Acar, Y., &; Loh, W. (2023). Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations. In J. A. Calandrino &; C. Troncoso (Eds.), 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023. USENIX Association.

Neil, L., Sri Ramulu, H., Acar, Y., &; Reaves, B. (2023). Who Comes Up with this Stuff? Interviewing Authors to Understand How They Produce Security Advice. Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023, 283–299.

Klemmer, J. H., Gutfleisch, M., Stransky, C., Acar, Y., Sasse, M. A., &; Fahl, S. (2023). “Make Them Change it Every Week!”: A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication. CoRR, abs/2309.00744.https://doi.org/10.48550/arXiv.2309.00744 

Bouma-Sims, E., &; Acar, Y. (2023). Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender. Proc. ACM Hum. Comput. Interact., 7(CSC), 1–31.https://doi.org/10.1145/3579461 

Bouma-Sims, E., &; Acar, Y. (2023). Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender. CoRR, abs/2302.05351.https://doi.org/10.48550/arXiv.2302.05351 

Pottebaum, J., Rossel, J., Somorovsky, J., Acar, Y., Fahr, R., Arias Cabarcos, P., Bodden, E., &; Gräßler, I. (2023). Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), 379–385.https://doi.org/10.1109/eurospw59978.2023.00048 

Amft, S., Höltervennhoff, S., Huaman, N., Krause, A., Simko, L., Acar, Y., &; Fahl, S. (2023). “We’ve Disabled MFA for You”: An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments. In W. Meng, C. D. Jensen, C. Cremers, &; E. Kirda (Eds.), Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, CCS 2023, Copenhagen, Denmark, November 26-30, 2023 (pp. 3138–3152). ACM.https://doi.org/10.1145/3576915.3623180 

Krüger, S., Reif, M., Wickert, A.-K., Nadi, S., Ali, K., Bodden, E., Acar, Y., Mezini, M., &; Fahl, S. (2023). Securing Your Crypto-API Usage Through Tool Support - A Usability Study. 2023 IEEE Secure Development Conference (SecDev).https://doi.org/10.1109/secdev56634.2023.00015