@inproceedings{67333,
  author       = {{Zarkalam, Darya and Rotthaler, Anna Lena and Simko, Lucy and Acar, Yasemin}},
  booktitle    = {{Twenty-Second Symposium on Usable Privacy and Security (SOUPS 2026)}},
  pages        = {{141–160}},
  title        = {{{From Thrift Stores to Digital Storefronts: Users’ Perspectives on Privacy and Security of Online Second-Hand Shopping in Germany}}},
  year         = {{2026}},
}

@inproceedings{62738,
  abstract     = {{Vulnerability disclosures are necessary to improve the security of our digital ecosystem. However, they can also be challenging for researchers: it may be hard to find out who the affected parties even are, or how to contact them. Researchers may be ignored or face adversity when disclosing vulnerabilities. We investigate researchers' experiences with vulnerability disclosures, extract best practices, and make recommendations for researchers, institutions that employ them, industry, and regulators to enable effective vulnerability disclosures.}},
  author       = {{Sri Ramulu, Harshini and Rotthaler, Anna Lena and Rossel, Jost and Gonzalez Rodriguez, Rachel and Wermke, Dominik and Fahl, Sascha and Kohno, Tadayoshi and Somorovsky, Juraj and Acar, Yasemin}},
  booktitle    = {{Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security}},
  keywords     = {{software vulnerabilities, vulnerability disclosure, security research}},
  publisher    = {{ACM}},
  title        = {{{Poster: Computer Security Researchers' Experiences with Vulnerability Disclosures}}},
  doi          = {{10.1145/3719027.3760723}},
  year         = {{2025}},
}

@inproceedings{61129,
  author       = {{Rotthaler, Anna Lena and Sri Ramulu, Harshini and Simko, Lucy and Fahl, Sascha and Acar, Yasemin}},
  booktitle    = {{IEEE Symposium on Security and Privacy, SP 2025, San Francisco, CA, USA, May 12-15, 2025}},
  editor       = {{Blanton, Marina and Enck, William and Nita-Rotaru, Cristina}},
  pages        = {{2228–2245}},
  publisher    = {{IEEE}},
  title        = {{{"It’s Time. Time for Digital Security.": An End User Study on Actionable Security and Privacy Advice}}},
  doi          = {{10.1109/SP61157.2025.00100}},
  year         = {{2025}},
}

@article{67335,
  author       = {{Rotthaler, Anna Lena and Oberthür, Simon and Somorovsky, Juraj and Thommes, Kirsten and Trang, Simon Thanh-Nam and Acar, Yasemin and Cukier, Michel and Enck, William and Kapravelos, Alexandros and Kästner, Christian}},
  journal      = {{arXiv preprint arXiv:2512.02600}},
  title        = {{{S3C2 SICP Summit 2025-06: Vulnerability Response Summit}}},
  year         = {{2025}},
}

@inproceedings{67336,
  author       = {{Sammak, Rami and Rotthaler, Anna Lena and Sri Ramulu, Harshini and Wermke, Dominik and Acar, Yasemin}},
  booktitle    = {{Proceedings of the 2024 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses}},
  pages        = {{56–66}},
  title        = {{{Developers’ approaches to software supply chain security: An interview study}}},
  year         = {{2023}},
}