75 Publications
2024 | Journal Article | LibreCat-ID: 47275
Herbert, Franziska, Steffen Becker, Annalina Buckmann, Marvin Kowalewski, Jonas Hielscher, Yasemin Acar, Markus Dürmuth, M. Angela Sasse, and Yixin Zou. “Digital Security -- A Question of Perspective. A Large-Scale Telephone Survey with Four At-Risk User Groups.” IEEE Symposium on Security and Privacy. IEEE, New York, NY, USA, 2024. https://doi.org/10.48550/arXiv.2212.12964.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47304
Wermke, Dominik, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, and Sascha Fahl. “‘Always Contribute Back’: A Qualitative Study on Security Challenges of the Open Source Supply Chain.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 1545–1560. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179378.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47299
Krause, Alexander, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, and Sascha Fahl. “Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47310
Fourné, Marcel, Dominik Wermke, William Enck, Sascha Fahl, and Yasemin Acar. “It’s like Flossing Your Teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 1527–1544. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179320.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47311
Munyendo, Collins W., Yasemin Acar, and Adam J. Aviv. “‘In Eighty Percent of the Cases, I Select the Password for Them’: Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 570–587. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179410.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47296
Kohno, Tadayoshi, Yasemin Acar, and Wulf Loh. “Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations.” CoRR abs/2302.14326 (2023). https://doi.org/10.48550/arXiv.2302.14326.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47306
Herbert, Franziska, Steffen Becker, Leonie Schaewitz, Jonas Hielscher, Marvin Kowalewski, M. Angela Sasse, Yasemin Acar, and Markus Dürmuth. “A World Full of Privacy and Security (Mis)Conceptions? Findings of a Representative Survey in 12 Countries.” In Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems, CHI 2023, Hamburg, Germany, April 23-28, 2023, edited by Albrecht Schmidt, Kaisa Väänänen, Tesh Goyal, Per Ola Kristensson, Anicia Peters, Stefanie Mueller, Julie R. Williamson, and Max L. Wilson, 582:1–582:23. ACM, 2023. https://doi.org/10.1145/3544548.3581410.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47303
Keküllüoglu, Dilara, and Yasemin Acar. “‘We Are a Startup to the Core’: A Qualitative Interview Study on the Security and Privacy Development Practices in Turkish Software Startups.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2015–2031. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179339.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47307
Kaur, Mannat, Harshini Sri Ramulu, Yasemin Acar, and Tobias Fiebig. “‘Oh Yes! Over-Preparing for Meetings Is My Jam :)’: The Gendered Experiences of System Administrators.” Proc. ACM Hum. Comput. Interact. 7, no. CSCW1 (2023): 1–38. https://doi.org/10.1145/3579617.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47294
Tran, Mindy, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, and Laurie A. Williams. “S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit.” CoRR abs/2307.15642 (2023). https://doi.org/10.48550/arXiv.2307.15642.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47293
Dunlap, Trevor, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, and Laurie A. Williams. “S3C2 Summit 2023-02: Industry Secure Supply Chain Summit.” CoRR abs/2307.16557 (2023). https://doi.org/10.48550/arXiv.2307.16557.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47292
Enck, William, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, and Laurie A. Williams. “S3C2 Summit 2023-06: Government Secure Supply Chain Summit.” CoRR abs/2308.06850 (2023). https://doi.org/10.48550/arXiv.2308.06850.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47298
Mink, Jaron, Harjot Kaur, Juliane Schmüser, Sascha Fahl, and Yasemin Acar. “‘Security Is Not My Field, I’m a Stats Guy’: A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Journal Article | LibreCat-ID: 47295
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, and Sascha Fahl. “Lost and Not Found: An Investigation of Recovery Methods for Multi-Factor Authentication.” CoRR abs/2306.09708 (2023). https://doi.org/10.48550/arXiv.2306.09708.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47305
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Yasemin Acar, and Sascha Fahl. “‘Would You Give the Same Priority to the Bank and a Game? I Do Not!’ Exploring Credential Management Strategies and Obstacles during Password Manager Setup.” In Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023, edited by Patrick Gage Kelley and Apu Kapadia, 171–190. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47301
Höltervennhoff, Sandra, Philip Klostermeyer, Noah Wöhler, Yasemin Acar, and Sascha Fahl. “‘I Wouldn’t Want My Unsafe Code to Run My Pacemaker’: An Interview Study on the Use, Comprehension, and Perceived Risks of Unsafe Rust.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47300
Kohno, Tadayoshi, Yasemin Acar, and Wulf Loh. “Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47312
Neil, Lorenzo, Harshini Sri Ramulu, Yasemin Acar, and Bradley Reaves. “Who Comes Up with This Stuff? Interviewing Authors to Understand How They Produce Security Advice.” In Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023, 283–299. USENIX Association, 2023.
LibreCat
2023 | Journal Article | LibreCat-ID: 46801
Bouma-Sims, Elijah, and Yasemin Acar. “Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender.” Proc. ACM Hum. Comput. Interact. 7, no. CSCW1 (2023): 1–31. https://doi.org/10.1145/3579461.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47297
Bouma-Sims, Elijah, and Yasemin Acar. “Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender.” CoRR abs/2302.05351 (2023). https://doi.org/10.48550/arXiv.2302.05351.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47291
Klemmer, Jan H., Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, and Sascha Fahl. “‘Make Them Change It Every Week!’: A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication.” CoRR abs/2309.00744 (2023). https://doi.org/10.48550/arXiv.2309.00744.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 49438
Krüger, Stefan, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Yasemin Acar, Mira Mezini, and Sascha Fahl. “Securing Your Crypto-API Usage Through Tool Support - A Usability Study.” In 2023 IEEE Secure Development Conference (SecDev). IEEE, 2023. https://doi.org/10.1109/secdev56634.2023.00015.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 46500
Pottebaum, Jens, Jost Rossel, Juraj Somorovsky, Yasemin Acar, René Fahr, Patricia Arias Cabarcos, Eric Bodden, and Iris Gräßler. “Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth.” In 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), 379–85. IEEE, 2023. https://doi.org/10.1109/eurospw59978.2023.00048.
LibreCat
| DOI
| Download (ext.)
2023 | Journal Article | LibreCat-ID: 53348
Fourné, Marcel, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda.” IEEE Secur. Priv. 21, no. 6 (2023): 59–63. https://doi.org/10.1109/MSEC.2023.3316569.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 53362
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, and Sascha Fahl. “‘We’ve Disabled MFA for You’: An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments.” In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, CCS 2023, Copenhagen, Denmark, November 26-30, 2023, edited by Weizhi Meng, Christian Damsgaard Jensen, Cas Cremers, and Engin Kirda, 3138–3152. ACM, 2023. https://doi.org/10.1145/3576915.3623180.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 53366
Tran, Mindy, Collins W Munyendo, Harshini Sri Ramulu, Rachel Gonzalez Rodriguez, Luisa Ball Schnell, Cora Sula, Lucy Simko, and Yasemin Acar. “Security, Privacy, and Data-Sharing Trade-Offs When Moving to the United States: Insights from a Qualitative Study.” In 2024 IEEE Symposium on Security and Privacy (SP), 4–4, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 53369
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, and Sascha Fahl. “‘We’ve Disabled MFA for You’: An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments.” In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 3138–3152, 2023.
LibreCat
2023 | Journal Article | LibreCat-ID: 53368
Fourné, Marcel, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda.” IEEE Security & Privacy 21, no. 6 (2023): 59–63.
LibreCat
2023 | Journal Article | LibreCat-ID: 53352
Simko, Lucy, Harshini Sri Ramulu, Tadayoshi Kohno, and Yasemin Acar. “The Use and Non-Use of Technology During Hurricanes.” Proc. ACM Hum. Comput. Interact. 7, no. CSCW2 (2023): 1–54. https://doi.org/10.1145/3610215.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47289
Huaman, Nicolas, Alexander Krause, Dominik Wermke, Jan H. Klemmer, Christian Stransky, Yasemin Acar, and Sascha Fahl. “If You Can’t Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers.” In Eighteenth Symposium on Usable Privacy and Security, SOUPS 2022, Boston, MA, USA, August 7-9, 2022, edited by Sonia Chiasson and Apu Kapadia, 313–330. USENIX Association, 2022.
LibreCat
2022 | Conference Paper | LibreCat-ID: 47286
Gutfleisch, Marco, Jan H. Klemmer, Niklas Busch, Yasemin Acar, M. Angela Sasse, and Sascha Fahl. “How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 893–910. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833756.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47287
Stransky, Christian, Oliver Wiese, Volker Roth, Yasemin Acar, and Sascha Fahl. “27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 860–875. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833755.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47283
Kaur, Harjot, Sabrina Amft, Daniel Votipka, Yasemin Acar, and Sascha Fahl. “Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples.” In 31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10-12, 2022, edited by Kevin R. B. Butler and Kurt Thomas, 4041–4058. USENIX Association, 2022.
LibreCat
2022 | Journal Article | LibreCat-ID: 47290
Huaman, Nicolas, Sabrina Amft, Marten Oltrogge, Yasemin Acar, and Sascha Fahl. “They Would Do Better If They Worked Together: Interaction Problems Between Password Managers and the Web.” IEEE Secur. Priv. 20, no. 2 (2022): 49–60. https://doi.org/10.1109/MSEC.2021.3123795.
LibreCat
| DOI
2022 | Journal Article | LibreCat-ID: 47282
Schmüser, Juliane, Noah Wöhler, Harshini Sri Ramulu, Christian Stransky, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “‘Please Help Share!’: Security and Privacy Advice on Twitter during the 2022 Russian Invasion of Ukraine.” CoRR abs/2208.11581 (2022). https://doi.org/10.48550/arXiv.2208.11581.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47288
Jancar, Jan, Marcel Fourné, Daniel De Almeida Braga, Mohamed Sabt, Peter Schwabe, Gilles Barthe, Pierre-Alain Fouque, and Yasemin Acar. “‘They’re Not That Hard to Mitigate’: What Cryptographic Library Developers Think About Timing Attacks.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 632–649. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833713.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47285
Wermke, Dominik, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, and Sascha Fahl. “Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 1880–1896. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833686.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47284
Munyendo, Collins W., Yasemin Acar, and Adam J. Aviv. “‘Desperate Times Call for Desperate Measures’: User Concerns with Mobile Loan Apps in Kenya.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 2304–2319. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833779.
LibreCat
| DOI
2022 | Journal Article | LibreCat-ID: 47281
Krause, Alexander, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, and Sascha Fahl. “Committed by Accident: Studying Prevention and Remediation Strategies Against Secret Leakage in Source Code Repositories.” CoRR abs/2211.06213 (2022). https://doi.org/10.48550/arXiv.2211.06213.
LibreCat
| DOI
2022 | Journal Article | LibreCat-ID: 53367
Herbert, Franziska, Steffen Becker, Annalina Buckmann, Marvin Kowalewski, Jonas Hielscher, Yasemin Acar, Markus Dürmuth, Yixin Zou, and M Angela Sasse. “Digital Security–A Question of Perspective. A Large-Scale Telephone Survey with Four At-Risk User Groups.” ArXiv Preprint ArXiv:2212.12964, 2022.
LibreCat
2021 | Dissertation | LibreCat-ID: 47271
Acar, Yasemin. Human Factors in Secure Software Development. University of Marburg, Germany, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47265
Huaman, Nicolas, Bennet von Skarczinski, Christian Stransky, Dominik Wermke, Yasemin Acar, Arne Dreißigacker, and Sascha Fahl. “A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-Sized Enterprises.” In 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, edited by Michael Bailey and Rachel Greenstadt, 1235–1252. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47264
Oltrogge, Marten, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes, and Sascha Fahl. “Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications.” In 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, edited by Michael Bailey and Rachel Greenstadt, 4347–4364. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47270
Häring, Maximilian, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “Never Ever or No Matter What: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany.” In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021, edited by Sonia Chiasson, 77–98. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47268
Stransky, Christian, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna Lena Fehlhaber, Miranda Wei, Blase Ur, and Sascha Fahl. “On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security.” In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021, edited by Sonia Chiasson, 437–454. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47267
Huaman, Nicolas, Sabrina Amft, Marten Oltrogge, Yasemin Acar, and Sascha Fahl. “They Would Do Better If They Worked Together: The Case of Interaction Problems Between Password Managers and Websites.” In 2021 IEEE Symposium on Security and Privacy (SP). IEEE, 2021. https://doi.org/10.1109/sp40001.2021.00094.
LibreCat
| DOI
2021 | Conference Paper | LibreCat-ID: 47266
Haney, Julie M., Yasemin Acar, and Susanne Furman. “‘It’s the Company, the Government, You and I’: User Perceptions of Responsibility for Smart Home Privacy and Security.” In 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, edited by Michael Bailey and Rachel Greenstadt, 411–428. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47269
Neil, Lorenzo, Elijah Bouma-Sims, Evan Lafontaine, Yasemin Acar, and Bradley Reaves. “Investigating Web Service Account Remediation Advice.” In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021, edited by Sonia Chiasson, 359–376. USENIX Association, 2021.
LibreCat
2020 | Conference Paper | LibreCat-ID: 47879
Haney, Julie, Susanne Furman, and Yasemin Acar. “Smart Home Security and Privacy Mitigations: Consumer Perceptions, Practices, and Challenges.” International Conference on Human-Computer Interaction, Copenhagen, -1, 2020.
LibreCat
2020 | Book Chapter | LibreCat-ID: 47261
Haney, Julie M., Susanne M. Furman, and Yasemin Acar. “Smart Home Security and Privacy Mitigations: Consumer Perceptions, Practices, and Challenges.” In HCI for Cybersecurity, Privacy and Trust. Cham: Springer International Publishing, 2020. https://doi.org/10.1007/978-3-030-50309-3_26.
LibreCat
| DOI
2020 | Conference Paper | LibreCat-ID: 47260
Wermke, Dominik, Nicolas Huaman, Christian Stransky, Niklas Busch, Yasemin Acar, and Sascha Fahl. “Cloudy with a Chance of Misconceptions: Exploring Users’ Perceptions and Expectations of Security and Privacy in Cloud Office Suites.” In Sixteenth Symposium on Usable Privacy and Security, SOUPS 2020, August 7-11, 2020, edited by Heather Richter Lipford and Sonia Chiasson, 359–377. USENIX Association, 2020.
LibreCat
2020 | Conference Paper | LibreCat-ID: 47262
Gorski, Peter Leo, Yasemin Acar, Luigi Lo Iacono, and Sascha Fahl. “Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs.” In Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems. ACM, 2020. https://doi.org/10.1145/3313831.3376142.
LibreCat
| DOI
2018 | Report | LibreCat-ID: 47876
Haney, Julie, Mary Theofanos, Yasemin Acar, and Sandra Spickard Prettyman. Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs. National Institute of Standards and Technology, 2018. https://doi.org/10.6028/nist.ir.8241.
LibreCat
| DOI
2018 | Conference Paper | LibreCat-ID: 47253
Wu, Yuxi, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, and Blase Ur. “Your Secrets Are Safe.” In Proceedings of the 2018 World Wide Web Conference on World Wide Web - WWW ’18. ACM Press, 2018. https://doi.org/10.1145/3178876.3186088.
LibreCat
| DOI
2018 | Conference Paper | LibreCat-ID: 47255
Haney, Julie M., Mary Theofanos, Yasemin Acar, and Sandra Spickard Prettyman. “‘We Make It a Big Deal in the Company’: Security Mindsets in Organizations That Develop Cryptographic Products.” In Fourteenth Symposium on Usable Privacy and Security, SOUPS 2018, Baltimore, MD, USA, August 12-14, 2018, edited by Mary Ellen Zurko and Heather Richter Lipford, 357–373. USENIX Association, 2018.
LibreCat
2018 | Conference Paper | LibreCat-ID: 47254
Oltrogge, Marten, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, and Michael Backes. “The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators.” In 2018 IEEE Symposium on Security and Privacy (SP). IEEE, 2018. https://doi.org/10.1109/sp.2018.00005.
LibreCat
| DOI
2018 | Conference Paper | LibreCat-ID: 47256
Gorski, Peter Leo, Luigi Lo Iacono, Dominik Wermke, Christian Stransky, Sebastian Möller, Yasemin Acar, and Sascha Fahl. “Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse.” In Fourteenth Symposium on Usable Privacy and Security, SOUPS 2018, Baltimore, MD, USA, August 12-14, 2018, edited by Mary Ellen Zurko and Heather Richter Lipford, 265–281. USENIX Association, 2018.
LibreCat
2018 | Conference Paper | LibreCat-ID: 47252
Wermke, Dominik, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, and Sascha Fahl. “A Large Scale Investigation of Obfuscation Use in Google Play.” In Proceedings of the 34th Annual Computer Security Applications Conference, ACSAC 2018, San Juan, PR, USA, December 03-07, 2018, 222–235. ACM, 2018. https://doi.org/10.1145/3274694.3274726.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47249
Derr, Erik, Sven Bugiel, Sascha Fahl, Yasemin Acar, and Michael Backes. “Keep Me Updated: An Empirical Study of Third-Party Library Updatability on Android.” In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2017. https://doi.org/10.1145/3133956.3134059.
LibreCat
| DOI
2017 | Journal Article | LibreCat-ID: 47309
Acar, Yasemin, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, and Christian Stransky. “How Internet Resources Might Be Helping You Develop Faster but Less Securely.” IEEE Secur. Priv. 15, no. 2 (2017): 50–60. https://doi.org/10.1109/MSP.2017.24.
LibreCat
| DOI
2017 | Report | LibreCat-ID: 47873
Redmiles, Elissa M., Yasemin Acar, Sascha Fahl, and Michelle L. Mazurek. A Summary of Survey Methodology Best Practices for Security and Privacy Researchers. University of Maryland Computer Science Department, 2017. https://doi.org/10.13016/M22K2W.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47248
Acar, Yasemin, Christian Stransky, Dominik Wermke, Charles Weir, Michelle L. Mazurek, and Sascha Fahl. “Developers Need Support, Too: A Survey of Security Advice for Software Developers.” In 2017 IEEE Cybersecurity Development (SecDev). IEEE, 2017. https://doi.org/10.1109/secdev.2017.17.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47245
Stransky, Christian, Yasemin Acar, Duc Cuong Nguyen, Dominik Wermke, Doowon Kim, Elissa M. Redmiles, Michael Backes, Simson L. Garfinkel, Michelle L. Mazurek, and Sascha Fahl. “Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers.” In 10th USENIX Workshop on Cyber Security Experimentation and Test, CSET 2017, Vancouver, BC, Canada, August 14, 2017, edited by José M. Fernandez and Mathias Payer. USENIX Association, 2017.
LibreCat
2017 | Conference Paper | LibreCat-ID: 47243
Fischer, Felix, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, and Sascha Fahl. “Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security.” In 2017 IEEE Symposium on Security and Privacy, SP 2017, San Jose, CA, USA, May 22-26, 2017, 121–136. IEEE Computer Society, 2017. https://doi.org/10.1109/SP.2017.31.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47250
Nguyen, Duc Cuong, Dominik Wermke, Yasemin Acar, Michael Backes, Charles Weir, and Sascha Fahl. “A Stitch in Time: Supporting Android Developers in Writing Secure Code.” In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2017. https://doi.org/10.1145/3133956.3133977.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47242
Acar, Yasemin, Sascha Fahl, and Michelle L. Mazurek. “You Are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users.” In 2016 IEEE Cybersecurity Development (SecDev). IEEE, 2017. https://doi.org/10.1109/secdev.2016.013.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47246
Acar, Yasemin, Michael Backes, Sascha Fahl, Simson Garfinkel, Doowon Kim, Michelle L. Mazurek, and Christian Stransky. “Comparing the Usability of Cryptographic APIs.” In 2017 IEEE Symposium on Security and Privacy (SP). IEEE, 2017. https://doi.org/10.1109/sp.2017.52.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47244
Acar, Yasemin, Christian Stransky, Dominik Wermke, Michelle L. Mazurek, and Sascha Fahl. “Security Developer Studies with GitHub Users: Exploring a Convenience Sample.” In Thirteenth Symposium on Usable Privacy and Security, SOUPS 2017, Santa Clara, CA, USA, July 12-14, 2017, 81–95. USENIX Association, 2017.
LibreCat
2016 | Conference Paper | LibreCat-ID: 47240
Acar, Yasemin, Michael Backes, Sven Bugiel, Sascha Fahl, Patrick McDaniel, and Matthew Smith. “SoK: Lessons Learned from Android Security Research for Appified Software Platforms.” In 2016 IEEE Symposium on Security and Privacy (SP). IEEE, 2016. https://doi.org/10.1109/sp.2016.33.
LibreCat
| DOI
2016 | Conference Paper | LibreCat-ID: 47241
Acar, Yasemin, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, and Christian Stransky. “You Get Where You’re Looking for: The Impact of Information Sources on Code Security.” In 2016 IEEE Symposium on Security and Privacy (SP). IEEE, 2016. https://doi.org/10.1109/sp.2016.25.
LibreCat
| DOI
2016 | Conference Paper | LibreCat-ID: 47239
Dechand, Sergej, Dominik Schürmann, Karoline Busse, Yasemin Acar, Sascha Fahl, and Matthew Smith. “An Empirical Study of Textual Key-Fingerprint Representations.” In 25th USENIX Security Symposium, USENIX Security 16, Austin, TX, USA, August 10-12, 2016, edited by Thorsten Holz and Stefan Savage, 193–208. USENIX Association, 2016.
LibreCat
2015 | Conference Paper | LibreCat-ID: 47233
Perl, Henning, Sergej Dechand, Matthew Smith, Daniel Arp, Fabian Yamaguchi, Konrad Rieck, Sascha Fahl, and Yasemin Acar. “VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits.” In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. ACM, 2015. https://doi.org/10.1145/2810103.2813604.
LibreCat
| DOI
2015 | Conference Paper | LibreCat-ID: 47232
Oltrogge, Marten, Yasemin Acar, Sergej Dechand, Matthew Smith, and Sascha Fahl. “To Pin or Not to Pin-Helping App Developers Bullet Proof Their TLS Connections.” In 24th USENIX Security Symposium, USENIX Security 15, Washington, D.C., USA, August 12-14, 2015, edited by Jaeyeon Jung and Thorsten Holz, 239–254. USENIX Association, 2015.
LibreCat
2014 | Conference Paper | LibreCat-ID: 47162
Fahl, Sascha, Yasemin Acar, Henning Perl, and Matthew Smith. “Why Eve and Mallory (Also) Love Webmasters.” In Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security. ACM, 2014. https://doi.org/10.1145/2590296.2590341.
LibreCat
| DOI
2013 | Conference Paper | LibreCat-ID: 47161
Fahl, Sascha, Marian Harbach, Yasemin Acar, and Matthew Smith. “On the Ecological Validity of a Password Study.” In Proceedings of the Ninth Symposium on Usable Privacy and Security. ACM, 2013. https://doi.org/10.1145/2501604.2501617.
LibreCat
| DOI
Search
Filter Publications
Display / Sort
Export / Embed
75 Publications
2024 | Journal Article | LibreCat-ID: 47275
Herbert, Franziska, Steffen Becker, Annalina Buckmann, Marvin Kowalewski, Jonas Hielscher, Yasemin Acar, Markus Dürmuth, M. Angela Sasse, and Yixin Zou. “Digital Security -- A Question of Perspective. A Large-Scale Telephone Survey with Four At-Risk User Groups.” IEEE Symposium on Security and Privacy. IEEE, New York, NY, USA, 2024. https://doi.org/10.48550/arXiv.2212.12964.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47304
Wermke, Dominik, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, and Sascha Fahl. “‘Always Contribute Back’: A Qualitative Study on Security Challenges of the Open Source Supply Chain.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 1545–1560. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179378.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47299
Krause, Alexander, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, and Sascha Fahl. “Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47310
Fourné, Marcel, Dominik Wermke, William Enck, Sascha Fahl, and Yasemin Acar. “It’s like Flossing Your Teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 1527–1544. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179320.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47311
Munyendo, Collins W., Yasemin Acar, and Adam J. Aviv. “‘In Eighty Percent of the Cases, I Select the Password for Them’: Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 570–587. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179410.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47296
Kohno, Tadayoshi, Yasemin Acar, and Wulf Loh. “Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations.” CoRR abs/2302.14326 (2023). https://doi.org/10.48550/arXiv.2302.14326.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47306
Herbert, Franziska, Steffen Becker, Leonie Schaewitz, Jonas Hielscher, Marvin Kowalewski, M. Angela Sasse, Yasemin Acar, and Markus Dürmuth. “A World Full of Privacy and Security (Mis)Conceptions? Findings of a Representative Survey in 12 Countries.” In Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems, CHI 2023, Hamburg, Germany, April 23-28, 2023, edited by Albrecht Schmidt, Kaisa Väänänen, Tesh Goyal, Per Ola Kristensson, Anicia Peters, Stefanie Mueller, Julie R. Williamson, and Max L. Wilson, 582:1–582:23. ACM, 2023. https://doi.org/10.1145/3544548.3581410.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47303
Keküllüoglu, Dilara, and Yasemin Acar. “‘We Are a Startup to the Core’: A Qualitative Interview Study on the Security and Privacy Development Practices in Turkish Software Startups.” In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2015–2031. IEEE, 2023. https://doi.org/10.1109/SP46215.2023.10179339.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47307
Kaur, Mannat, Harshini Sri Ramulu, Yasemin Acar, and Tobias Fiebig. “‘Oh Yes! Over-Preparing for Meetings Is My Jam :)’: The Gendered Experiences of System Administrators.” Proc. ACM Hum. Comput. Interact. 7, no. CSCW1 (2023): 1–38. https://doi.org/10.1145/3579617.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47294
Tran, Mindy, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, and Laurie A. Williams. “S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit.” CoRR abs/2307.15642 (2023). https://doi.org/10.48550/arXiv.2307.15642.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47293
Dunlap, Trevor, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, and Laurie A. Williams. “S3C2 Summit 2023-02: Industry Secure Supply Chain Summit.” CoRR abs/2307.16557 (2023). https://doi.org/10.48550/arXiv.2307.16557.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47292
Enck, William, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, and Laurie A. Williams. “S3C2 Summit 2023-06: Government Secure Supply Chain Summit.” CoRR abs/2308.06850 (2023). https://doi.org/10.48550/arXiv.2308.06850.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47298
Mink, Jaron, Harjot Kaur, Juliane Schmüser, Sascha Fahl, and Yasemin Acar. “‘Security Is Not My Field, I’m a Stats Guy’: A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Journal Article | LibreCat-ID: 47295
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, and Sascha Fahl. “Lost and Not Found: An Investigation of Recovery Methods for Multi-Factor Authentication.” CoRR abs/2306.09708 (2023). https://doi.org/10.48550/arXiv.2306.09708.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 47305
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Yasemin Acar, and Sascha Fahl. “‘Would You Give the Same Priority to the Bank and a Game? I Do Not!’ Exploring Credential Management Strategies and Obstacles during Password Manager Setup.” In Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023, edited by Patrick Gage Kelley and Apu Kapadia, 171–190. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47301
Höltervennhoff, Sandra, Philip Klostermeyer, Noah Wöhler, Yasemin Acar, and Sascha Fahl. “‘I Wouldn’t Want My Unsafe Code to Run My Pacemaker’: An Interview Study on the Use, Comprehension, and Perceived Risks of Unsafe Rust.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47300
Kohno, Tadayoshi, Yasemin Acar, and Wulf Loh. “Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations.” In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, edited by Joseph A. Calandrino and Carmela Troncoso. USENIX Association, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 47312
Neil, Lorenzo, Harshini Sri Ramulu, Yasemin Acar, and Bradley Reaves. “Who Comes Up with This Stuff? Interviewing Authors to Understand How They Produce Security Advice.” In Nineteenth Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim, CA, USA, August 5-7, 2023, 283–299. USENIX Association, 2023.
LibreCat
2023 | Journal Article | LibreCat-ID: 46801
Bouma-Sims, Elijah, and Yasemin Acar. “Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender.” Proc. ACM Hum. Comput. Interact. 7, no. CSCW1 (2023): 1–31. https://doi.org/10.1145/3579461.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47297
Bouma-Sims, Elijah, and Yasemin Acar. “Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender.” CoRR abs/2302.05351 (2023). https://doi.org/10.48550/arXiv.2302.05351.
LibreCat
| DOI
2023 | Journal Article | LibreCat-ID: 47291
Klemmer, Jan H., Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, and Sascha Fahl. “‘Make Them Change It Every Week!’: A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication.” CoRR abs/2309.00744 (2023). https://doi.org/10.48550/arXiv.2309.00744.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 49438
Krüger, Stefan, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Yasemin Acar, Mira Mezini, and Sascha Fahl. “Securing Your Crypto-API Usage Through Tool Support - A Usability Study.” In 2023 IEEE Secure Development Conference (SecDev). IEEE, 2023. https://doi.org/10.1109/secdev56634.2023.00015.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 46500
Pottebaum, Jens, Jost Rossel, Juraj Somorovsky, Yasemin Acar, René Fahr, Patricia Arias Cabarcos, Eric Bodden, and Iris Gräßler. “Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth.” In 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), 379–85. IEEE, 2023. https://doi.org/10.1109/eurospw59978.2023.00048.
LibreCat
| DOI
| Download (ext.)
2023 | Journal Article | LibreCat-ID: 53348
Fourné, Marcel, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda.” IEEE Secur. Priv. 21, no. 6 (2023): 59–63. https://doi.org/10.1109/MSEC.2023.3316569.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 53362
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, and Sascha Fahl. “‘We’ve Disabled MFA for You’: An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments.” In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, CCS 2023, Copenhagen, Denmark, November 26-30, 2023, edited by Weizhi Meng, Christian Damsgaard Jensen, Cas Cremers, and Engin Kirda, 3138–3152. ACM, 2023. https://doi.org/10.1145/3576915.3623180.
LibreCat
| DOI
2023 | Conference Paper | LibreCat-ID: 53366
Tran, Mindy, Collins W Munyendo, Harshini Sri Ramulu, Rachel Gonzalez Rodriguez, Luisa Ball Schnell, Cora Sula, Lucy Simko, and Yasemin Acar. “Security, Privacy, and Data-Sharing Trade-Offs When Moving to the United States: Insights from a Qualitative Study.” In 2024 IEEE Symposium on Security and Privacy (SP), 4–4, 2023.
LibreCat
2023 | Conference Paper | LibreCat-ID: 53369
Amft, Sabrina, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, and Sascha Fahl. “‘We’ve Disabled MFA for You’: An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments.” In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 3138–3152, 2023.
LibreCat
2023 | Journal Article | LibreCat-ID: 53368
Fourné, Marcel, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda.” IEEE Security & Privacy 21, no. 6 (2023): 59–63.
LibreCat
2023 | Journal Article | LibreCat-ID: 53352
Simko, Lucy, Harshini Sri Ramulu, Tadayoshi Kohno, and Yasemin Acar. “The Use and Non-Use of Technology During Hurricanes.” Proc. ACM Hum. Comput. Interact. 7, no. CSCW2 (2023): 1–54. https://doi.org/10.1145/3610215.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47289
Huaman, Nicolas, Alexander Krause, Dominik Wermke, Jan H. Klemmer, Christian Stransky, Yasemin Acar, and Sascha Fahl. “If You Can’t Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers.” In Eighteenth Symposium on Usable Privacy and Security, SOUPS 2022, Boston, MA, USA, August 7-9, 2022, edited by Sonia Chiasson and Apu Kapadia, 313–330. USENIX Association, 2022.
LibreCat
2022 | Conference Paper | LibreCat-ID: 47286
Gutfleisch, Marco, Jan H. Klemmer, Niklas Busch, Yasemin Acar, M. Angela Sasse, and Sascha Fahl. “How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 893–910. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833756.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47287
Stransky, Christian, Oliver Wiese, Volker Roth, Yasemin Acar, and Sascha Fahl. “27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 860–875. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833755.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47283
Kaur, Harjot, Sabrina Amft, Daniel Votipka, Yasemin Acar, and Sascha Fahl. “Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples.” In 31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10-12, 2022, edited by Kevin R. B. Butler and Kurt Thomas, 4041–4058. USENIX Association, 2022.
LibreCat
2022 | Journal Article | LibreCat-ID: 47290
Huaman, Nicolas, Sabrina Amft, Marten Oltrogge, Yasemin Acar, and Sascha Fahl. “They Would Do Better If They Worked Together: Interaction Problems Between Password Managers and the Web.” IEEE Secur. Priv. 20, no. 2 (2022): 49–60. https://doi.org/10.1109/MSEC.2021.3123795.
LibreCat
| DOI
2022 | Journal Article | LibreCat-ID: 47282
Schmüser, Juliane, Noah Wöhler, Harshini Sri Ramulu, Christian Stransky, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “‘Please Help Share!’: Security and Privacy Advice on Twitter during the 2022 Russian Invasion of Ukraine.” CoRR abs/2208.11581 (2022). https://doi.org/10.48550/arXiv.2208.11581.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47288
Jancar, Jan, Marcel Fourné, Daniel De Almeida Braga, Mohamed Sabt, Peter Schwabe, Gilles Barthe, Pierre-Alain Fouque, and Yasemin Acar. “‘They’re Not That Hard to Mitigate’: What Cryptographic Library Developers Think About Timing Attacks.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 632–649. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833713.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47285
Wermke, Dominik, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, and Sascha Fahl. “Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 1880–1896. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833686.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 47284
Munyendo, Collins W., Yasemin Acar, and Adam J. Aviv. “‘Desperate Times Call for Desperate Measures’: User Concerns with Mobile Loan Apps in Kenya.” In 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022, 2304–2319. IEEE, 2022. https://doi.org/10.1109/SP46214.2022.9833779.
LibreCat
| DOI
2022 | Journal Article | LibreCat-ID: 47281
Krause, Alexander, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, and Sascha Fahl. “Committed by Accident: Studying Prevention and Remediation Strategies Against Secret Leakage in Source Code Repositories.” CoRR abs/2211.06213 (2022). https://doi.org/10.48550/arXiv.2211.06213.
LibreCat
| DOI
2022 | Journal Article | LibreCat-ID: 53367
Herbert, Franziska, Steffen Becker, Annalina Buckmann, Marvin Kowalewski, Jonas Hielscher, Yasemin Acar, Markus Dürmuth, Yixin Zou, and M Angela Sasse. “Digital Security–A Question of Perspective. A Large-Scale Telephone Survey with Four At-Risk User Groups.” ArXiv Preprint ArXiv:2212.12964, 2022.
LibreCat
2021 | Dissertation | LibreCat-ID: 47271
Acar, Yasemin. Human Factors in Secure Software Development. University of Marburg, Germany, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47265
Huaman, Nicolas, Bennet von Skarczinski, Christian Stransky, Dominik Wermke, Yasemin Acar, Arne Dreißigacker, and Sascha Fahl. “A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-Sized Enterprises.” In 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, edited by Michael Bailey and Rachel Greenstadt, 1235–1252. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47264
Oltrogge, Marten, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes, and Sascha Fahl. “Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications.” In 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, edited by Michael Bailey and Rachel Greenstadt, 4347–4364. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47270
Häring, Maximilian, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, and Yasemin Acar. “Never Ever or No Matter What: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany.” In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021, edited by Sonia Chiasson, 77–98. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47268
Stransky, Christian, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna Lena Fehlhaber, Miranda Wei, Blase Ur, and Sascha Fahl. “On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security.” In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021, edited by Sonia Chiasson, 437–454. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47267
Huaman, Nicolas, Sabrina Amft, Marten Oltrogge, Yasemin Acar, and Sascha Fahl. “They Would Do Better If They Worked Together: The Case of Interaction Problems Between Password Managers and Websites.” In 2021 IEEE Symposium on Security and Privacy (SP). IEEE, 2021. https://doi.org/10.1109/sp40001.2021.00094.
LibreCat
| DOI
2021 | Conference Paper | LibreCat-ID: 47266
Haney, Julie M., Yasemin Acar, and Susanne Furman. “‘It’s the Company, the Government, You and I’: User Perceptions of Responsibility for Smart Home Privacy and Security.” In 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, edited by Michael Bailey and Rachel Greenstadt, 411–428. USENIX Association, 2021.
LibreCat
2021 | Conference Paper | LibreCat-ID: 47269
Neil, Lorenzo, Elijah Bouma-Sims, Evan Lafontaine, Yasemin Acar, and Bradley Reaves. “Investigating Web Service Account Remediation Advice.” In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021, edited by Sonia Chiasson, 359–376. USENIX Association, 2021.
LibreCat
2020 | Conference Paper | LibreCat-ID: 47879
Haney, Julie, Susanne Furman, and Yasemin Acar. “Smart Home Security and Privacy Mitigations: Consumer Perceptions, Practices, and Challenges.” International Conference on Human-Computer Interaction, Copenhagen, -1, 2020.
LibreCat
2020 | Book Chapter | LibreCat-ID: 47261
Haney, Julie M., Susanne M. Furman, and Yasemin Acar. “Smart Home Security and Privacy Mitigations: Consumer Perceptions, Practices, and Challenges.” In HCI for Cybersecurity, Privacy and Trust. Cham: Springer International Publishing, 2020. https://doi.org/10.1007/978-3-030-50309-3_26.
LibreCat
| DOI
2020 | Conference Paper | LibreCat-ID: 47260
Wermke, Dominik, Nicolas Huaman, Christian Stransky, Niklas Busch, Yasemin Acar, and Sascha Fahl. “Cloudy with a Chance of Misconceptions: Exploring Users’ Perceptions and Expectations of Security and Privacy in Cloud Office Suites.” In Sixteenth Symposium on Usable Privacy and Security, SOUPS 2020, August 7-11, 2020, edited by Heather Richter Lipford and Sonia Chiasson, 359–377. USENIX Association, 2020.
LibreCat
2020 | Conference Paper | LibreCat-ID: 47262
Gorski, Peter Leo, Yasemin Acar, Luigi Lo Iacono, and Sascha Fahl. “Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs.” In Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems. ACM, 2020. https://doi.org/10.1145/3313831.3376142.
LibreCat
| DOI
2018 | Report | LibreCat-ID: 47876
Haney, Julie, Mary Theofanos, Yasemin Acar, and Sandra Spickard Prettyman. Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs. National Institute of Standards and Technology, 2018. https://doi.org/10.6028/nist.ir.8241.
LibreCat
| DOI
2018 | Conference Paper | LibreCat-ID: 47253
Wu, Yuxi, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, and Blase Ur. “Your Secrets Are Safe.” In Proceedings of the 2018 World Wide Web Conference on World Wide Web - WWW ’18. ACM Press, 2018. https://doi.org/10.1145/3178876.3186088.
LibreCat
| DOI
2018 | Conference Paper | LibreCat-ID: 47255
Haney, Julie M., Mary Theofanos, Yasemin Acar, and Sandra Spickard Prettyman. “‘We Make It a Big Deal in the Company’: Security Mindsets in Organizations That Develop Cryptographic Products.” In Fourteenth Symposium on Usable Privacy and Security, SOUPS 2018, Baltimore, MD, USA, August 12-14, 2018, edited by Mary Ellen Zurko and Heather Richter Lipford, 357–373. USENIX Association, 2018.
LibreCat
2018 | Conference Paper | LibreCat-ID: 47254
Oltrogge, Marten, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, and Michael Backes. “The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators.” In 2018 IEEE Symposium on Security and Privacy (SP). IEEE, 2018. https://doi.org/10.1109/sp.2018.00005.
LibreCat
| DOI
2018 | Conference Paper | LibreCat-ID: 47256
Gorski, Peter Leo, Luigi Lo Iacono, Dominik Wermke, Christian Stransky, Sebastian Möller, Yasemin Acar, and Sascha Fahl. “Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse.” In Fourteenth Symposium on Usable Privacy and Security, SOUPS 2018, Baltimore, MD, USA, August 12-14, 2018, edited by Mary Ellen Zurko and Heather Richter Lipford, 265–281. USENIX Association, 2018.
LibreCat
2018 | Conference Paper | LibreCat-ID: 47252
Wermke, Dominik, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, and Sascha Fahl. “A Large Scale Investigation of Obfuscation Use in Google Play.” In Proceedings of the 34th Annual Computer Security Applications Conference, ACSAC 2018, San Juan, PR, USA, December 03-07, 2018, 222–235. ACM, 2018. https://doi.org/10.1145/3274694.3274726.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47249
Derr, Erik, Sven Bugiel, Sascha Fahl, Yasemin Acar, and Michael Backes. “Keep Me Updated: An Empirical Study of Third-Party Library Updatability on Android.” In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2017. https://doi.org/10.1145/3133956.3134059.
LibreCat
| DOI
2017 | Journal Article | LibreCat-ID: 47309
Acar, Yasemin, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, and Christian Stransky. “How Internet Resources Might Be Helping You Develop Faster but Less Securely.” IEEE Secur. Priv. 15, no. 2 (2017): 50–60. https://doi.org/10.1109/MSP.2017.24.
LibreCat
| DOI
2017 | Report | LibreCat-ID: 47873
Redmiles, Elissa M., Yasemin Acar, Sascha Fahl, and Michelle L. Mazurek. A Summary of Survey Methodology Best Practices for Security and Privacy Researchers. University of Maryland Computer Science Department, 2017. https://doi.org/10.13016/M22K2W.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47248
Acar, Yasemin, Christian Stransky, Dominik Wermke, Charles Weir, Michelle L. Mazurek, and Sascha Fahl. “Developers Need Support, Too: A Survey of Security Advice for Software Developers.” In 2017 IEEE Cybersecurity Development (SecDev). IEEE, 2017. https://doi.org/10.1109/secdev.2017.17.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47245
Stransky, Christian, Yasemin Acar, Duc Cuong Nguyen, Dominik Wermke, Doowon Kim, Elissa M. Redmiles, Michael Backes, Simson L. Garfinkel, Michelle L. Mazurek, and Sascha Fahl. “Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers.” In 10th USENIX Workshop on Cyber Security Experimentation and Test, CSET 2017, Vancouver, BC, Canada, August 14, 2017, edited by José M. Fernandez and Mathias Payer. USENIX Association, 2017.
LibreCat
2017 | Conference Paper | LibreCat-ID: 47243
Fischer, Felix, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, and Sascha Fahl. “Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security.” In 2017 IEEE Symposium on Security and Privacy, SP 2017, San Jose, CA, USA, May 22-26, 2017, 121–136. IEEE Computer Society, 2017. https://doi.org/10.1109/SP.2017.31.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47250
Nguyen, Duc Cuong, Dominik Wermke, Yasemin Acar, Michael Backes, Charles Weir, and Sascha Fahl. “A Stitch in Time: Supporting Android Developers in Writing Secure Code.” In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2017. https://doi.org/10.1145/3133956.3133977.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47242
Acar, Yasemin, Sascha Fahl, and Michelle L. Mazurek. “You Are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users.” In 2016 IEEE Cybersecurity Development (SecDev). IEEE, 2017. https://doi.org/10.1109/secdev.2016.013.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47246
Acar, Yasemin, Michael Backes, Sascha Fahl, Simson Garfinkel, Doowon Kim, Michelle L. Mazurek, and Christian Stransky. “Comparing the Usability of Cryptographic APIs.” In 2017 IEEE Symposium on Security and Privacy (SP). IEEE, 2017. https://doi.org/10.1109/sp.2017.52.
LibreCat
| DOI
2017 | Conference Paper | LibreCat-ID: 47244
Acar, Yasemin, Christian Stransky, Dominik Wermke, Michelle L. Mazurek, and Sascha Fahl. “Security Developer Studies with GitHub Users: Exploring a Convenience Sample.” In Thirteenth Symposium on Usable Privacy and Security, SOUPS 2017, Santa Clara, CA, USA, July 12-14, 2017, 81–95. USENIX Association, 2017.
LibreCat
2016 | Conference Paper | LibreCat-ID: 47240
Acar, Yasemin, Michael Backes, Sven Bugiel, Sascha Fahl, Patrick McDaniel, and Matthew Smith. “SoK: Lessons Learned from Android Security Research for Appified Software Platforms.” In 2016 IEEE Symposium on Security and Privacy (SP). IEEE, 2016. https://doi.org/10.1109/sp.2016.33.
LibreCat
| DOI
2016 | Conference Paper | LibreCat-ID: 47241
Acar, Yasemin, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, and Christian Stransky. “You Get Where You’re Looking for: The Impact of Information Sources on Code Security.” In 2016 IEEE Symposium on Security and Privacy (SP). IEEE, 2016. https://doi.org/10.1109/sp.2016.25.
LibreCat
| DOI
2016 | Conference Paper | LibreCat-ID: 47239
Dechand, Sergej, Dominik Schürmann, Karoline Busse, Yasemin Acar, Sascha Fahl, and Matthew Smith. “An Empirical Study of Textual Key-Fingerprint Representations.” In 25th USENIX Security Symposium, USENIX Security 16, Austin, TX, USA, August 10-12, 2016, edited by Thorsten Holz and Stefan Savage, 193–208. USENIX Association, 2016.
LibreCat
2015 | Conference Paper | LibreCat-ID: 47233
Perl, Henning, Sergej Dechand, Matthew Smith, Daniel Arp, Fabian Yamaguchi, Konrad Rieck, Sascha Fahl, and Yasemin Acar. “VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits.” In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. ACM, 2015. https://doi.org/10.1145/2810103.2813604.
LibreCat
| DOI
2015 | Conference Paper | LibreCat-ID: 47232
Oltrogge, Marten, Yasemin Acar, Sergej Dechand, Matthew Smith, and Sascha Fahl. “To Pin or Not to Pin-Helping App Developers Bullet Proof Their TLS Connections.” In 24th USENIX Security Symposium, USENIX Security 15, Washington, D.C., USA, August 12-14, 2015, edited by Jaeyeon Jung and Thorsten Holz, 239–254. USENIX Association, 2015.
LibreCat
2014 | Conference Paper | LibreCat-ID: 47162
Fahl, Sascha, Yasemin Acar, Henning Perl, and Matthew Smith. “Why Eve and Mallory (Also) Love Webmasters.” In Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security. ACM, 2014. https://doi.org/10.1145/2590296.2590341.
LibreCat
| DOI
2013 | Conference Paper | LibreCat-ID: 47161
Fahl, Sascha, Marian Harbach, Yasemin Acar, and Matthew Smith. “On the Ecological Validity of a Password Study.” In Proceedings of the Ninth Symposium on Usable Privacy and Security. ACM, 2013. https://doi.org/10.1145/2501604.2501617.
LibreCat
| DOI