Sponsored by Ethyca
The following posters will be presented during the In-Person Poster Session on Monday, August 8, 2022, from 5:30 pm–6:45 pm.
Posters and their abstracts are available for download below to registered attendees now and to everyone beginning Monday, August 8, 2022. Copyright to the individual works is retained by the author[s].
Unpublished Work
Posters of unpublished research.
WiP: Where’s Eve? Evaluating Student Threat Modeling Performance and Perceptions
Carson Powers, Nickolas Gravel, Maxwell Mitchell, and Daniel Votipka, Tufts University
Vulnerability Discovery for All: Experiences of Marginalization in Vulnerability Discovery
Kelsey Fulton, University of Maryland; Samantha Katcher, Tufts University; Kevin Song and Marshini Chetty, University of Chicago; Michelle L. Mazurek, University of Maryland; Chloé Messdaghi, We Open Tech; Daniel Votipka, Tufts University
SenseHandle: Investigating Human-Door Interaction Behaviour for Authentication in the Physical World
Sarah Delgado Rodriguez, Lukas Mecke, and Florian Alt, University of the Bundeswehr Munich
Characterizing Misuse and Snooping in Home IoT Devices
Phoebe Moh, University of Maryland College Park; Adam Bates, University of Illinois at Urbana–Champaign; Michelle L. Mazurek and Noel Warford, University of Maryland College Park; Pubali Datta, University of Illinois at Urbana–Champaign; Nathan Malkin, University of Maryland
Privacy and Security Challenges in Doctoral Students' Research
Mary Anne Smart and Daniel Tan, UC San Diego
Understanding the how and the why: Exploring secure development practices through a course competition
Kelsey Fulton, University of Maryland; Daniel Votipka, Tufts University; Desiree Abrokwa, Michelle L. Mazurek, and Michael Hicks, University of Maryland; James Parker, Galois, Inc.
Out of Their Control: Investigating Privacy Attitudes and Behaviors Among Tinder Users
Elijah Bouma-Sims, Jacob Gursky, Sanjnah Kumar, Rebecca Stevens, Jasmine Tesfa, stella Yan, and Lorrie Faith Cranor, Carnegie Mellon University
Do authentication websites adopt friendly password registration error message design?
Masahiro Fujita, Tadakazu Yamanaka, Nori Matsuda, and Ayako Yoshimura, Mitsubishi Electric Corporation; Akira Kanaoka, Toho University
A Comparison of Account-Focused and Content-Focused Warnings on User Trust of Twitter Content
Ronald Thompson and Santana Koring'ura, Tufts University; Marshini Chetty, University of Chicago; Daniel Votipka, Tufts University
PhishED: Automated contextual feedback for reported Phishing
Adam Jenkins, Nadin Kokciyan, and Kami Vaniea, University of Edinburgh
Crumbl: An awareness enhancing tool for cookie collection
Yi-Shyuan Chiang, Ho Shan Lam, Xingjian Zhang, and Eshwar Chandrasekharan, University of Illinois Urbana-Champaign
Developing a Psychometric Scale to Measure One’s Valuation of Other People’s Privacy
Rakibul Hasan, Arizona State University; Rudolf Siegel, Rebecca Weil, and Katharina Krombholz, CISPA Helmholtz Center for Information Security
“An incident may have resulted in a suspected data compromise”: Impact of Data Breach Notification Terminology
Xiaoxin Shen, Ann Zhang, Xinyi Hu, Yixuan Wang, Mingjie Chen, and Kai Sze Luk, Carnegie Mellon University
A Platform for Uncovering Indian Users' Decision-Making Process in United Payment Interface (UPI) Apps
Kshitiz Sharma and Nandini Bajaj, Indian Institute of Technology, Kharagpur; Xinru Page, Brigham Young University; Mainack Mondal, Indian Institute of Technology, Kharagpur
Cybersecurity Comic: An Image Change to "Cool Cybersecurity" Findings and Challenges to Raise Children’s Security Awareness
Jennifer Friedauer, Ruhr-University Bochum; Harunobu Yagi, Central Japan Railway Company; Nissy Sombatruang, National Institute of Information and Communications Technology; Youki Kadobayashi, Nara Institute of Science and Technology; Daisuke Miyamoto, The University of Tokyo; Akira Fujita, National Institute of Information and Communications Technology
"If I could do this, I feel anyone could:" The Design and Evaluation of a Two-Factor Authentication Manager
Garrett Smith and Tarun Kumar Yadav, Brigham Young University; Jonathan Dutson, Microsoft; Scott Ruoti, The University of Tennessee; Kent Seamons, Brigham Young University
The Recipe for the Perfect Batch: Assessing New Cookie Category Terms
Adhishree Abhyankar, Rachna Sasheendran, Lydia Barit, Soha Jiwani, Lorrie Cranor, and Mireya Sotelo, Carnegie Mellon University
Do Users Want To Use Digital Identities? A Study Of A Concept Of An Identity Wallet
Sandra Kostic and Maija Poikela, Fraunhofer AISEC
"Others Have the Right to Know": Determinants of Willingness to Share COVID-19-Related Health Symptoms
Kirsten Chapman, Melanie Klimes, Braden Wellman, Garrett Smith, and Madeline Bonham, Brigham Young University; Yunan Chen, University of California Irvine; Staci Smith, Brigham Young University; Mainack Mondal, Indian Institute of Technology, Kharagpur; Xinru Page, Brigham Young University
"You have to be hyperaware": PhD Students’ Approaches to Boundary Management When Sharing Research-Related Information on Social Media
Samantha Hautea and Emilee Rader, Michigan State University
Published Work
Posters of usable security papers published recently at other venues.
A first look into users’ perceptions of facial recognition in the physical world
Sovantharith Seng, Rochester Institute of Technology; Mahdi Nasrullah Al-Ameen, Utah State University; Matthew Wright, Rochester Institute of Technology
“Money makes the world go around”: Identifying Barriers to Better Privacy in Children’s Apps From Developers’ Perspectives
Anirudh Ekambaranathan, Jun Zhao, and Max Van Kleek, University of Oxford
"Now I'm a bit angry:" Individuals' Awareness, Perception, and Responses to Data Breaches that Affected Them
Peter Mayer, Karlsruhe Institute of Technology; Yixin Zou and Florian Schaub, University of Michigan; Adam J. Aviv, The George Washington University
12 Angry Developers – A Qualitative Study on Developers’ Struggles with CSP
Sebastian Roth, Lea Gröber, Michael Backes, Katharina Krombholz, and Ben Stock, CISPA Helmholtz Center for Information Security
Investigating Car Drivers’ Information Demand after Safety and Security Critical Incidents
Lea Gröber, Matthias Fassl, Abhilash Gupta, and Katharina Krombholz, CISPA Helmholtz Center for Information Security
“Taking out the Trash”: Why Security Behavior Change requires Intentional Forgetting
Jonas Hielscher, Uta Menges, Annette Kluge, and M. Angela Sasse, Ruhr University Bochum
Identifying Password Reuse from Gaze and Keystroke Dynamics
Yasmeen Abdrabou, University of the Bundeswehr Munich and University of Glasgow; Johannes Schütte, University of the Bundeswehr Munich; Ahmed Shams, Fatura LLC; Ken Pfeuffer, Aarhus University and University of the Bundeswehr Munich; Daniel Buschek, University of Bayreuth; Mohamed Khamis, University of Glasgow; Florian Alt, University of the Bundeswehr Munich
Caring about Sharing: User Perceptions of Multiparty Data Sharing
Bailey Kacsmar, Kyle Tilbury, Miti Mazmudar, and Florian Kerschbaum, University of Waterloo
Exploring User-Centered Security Design for Usable Authentication Ceremonies
Matthias Fassl, Lea Gröber, and Katharina Krombholz, CISPA Helmholtz Center for Information Security
PriView -- Exploring Visualisations to Support Users’ Privacy Awareness
Sarah Prange, University of the Bundeswehr, Munich; Ahmed Shams, German University in Cairo; Robin Piening, LMU Munich; Yomna Abdelrahman and Florian Alt, Bundeswehr University Munich
Protection or Punishment? Relating the Design Space of Parental Control Apps and Perceptions about Them to Support Parenting for Online Safety
Ge Wang, Jun Zhao, Max Van Kleek, and Nigel Shadbolt, University of Oxford
User-Perceived Privacy in Blockchain
Simin Ghesmati, TU Wien, SBA Research; Walid Fdhila and Edgar Weippl, Uni Wien, SBA Research
Bits Under the Mattress: Understanding Different Risk Perceptions and Security Behaviors of Crypto-Asset Users
Svetlana Abramova, University of Innsbruck; Artemij Voskobojnikov and Konstantin (Kosta) Beznosov, University of British Columbia; Rainer Böhme, University of Innsbruck
Consumer Perspective on Loss of Support for Smart Home Devices
Susanne Furman and Julie Haney, National Institute of Standards and Technology
Owning and Sharing: Privacy Perceptions of Smart Speaker Users
Nicole Meng-Schneider, Dilara Keküllüoğlu, and Kami Vaniea, University of Edinburgh
How Usable Are iOS App Privacy Labels?
Shikun Zhang, Carnegie Mellon University; Yuanyuan Feng, University of Vermont; Yaxing Yao, University of Maryland, Baltimore County; Lorrie Faith Cranor and Norman Sadeh, Carnegie Mellon University
Understanding Shoulder Surfer Behavior and Attack Patterns Using Virtual Reality
Yasmeen Abdrabou, University of the Bundeswehr Munich and University of Glasgow; Radiah Rivu, University of the Bundeswehr Munich; Tarek Ammar, LMU Munich; Jonathan Liebers, Alia Saad, Carina Liebers, and Uwe Grünefeld, University of Duisburg-Essen; Pascan Knierim, University of the Bundeswehr Munich; Mohamed Khamis, University of Glasgow; Ville Mäkelä, University of Waterloo; Stefan Schneegass, University of Duisburg Essen; Florian Alt, University of the Bundeswehr Munich
Defining Privacy: How Users Interpret Technical Terms in Privacy Policies
Jenny Tang, Wellesley College; Hannah Shoemaker, Pomona College; Ada Lerner, Wellesley College; Eleanor Birrell, Pomona College
Apps Against the Spread: Privacy Implications and User Acceptance of COVID-19-Related Smartphone Apps on Three Continents
Christine Utz, CISPA Helmholtz Center for Information Security; Steffen Becker, Ruhr University Bochum and Max Planck Institute for Security and Privacy; Theodor Schnitzler, Florian M. Farke, Franziska Herbert, Leonie Schaewitz, and Martin Degeling, Ruhr University Bochum; Markus Dürmuth, Leibniz University Hannover
CookieBlock & CookieAudit: Fixing Cookie Consent with ML
Karel Kubicek, Dino Bollinger, Adrian Zanga, Carlos Cotrini, and David Basin, ETH Zurich
Systematization of Knowledge: Human, Organizational, and Technological Dimensions of Developers’ Challenges in Engineering Secure Software
Azadeh Mokhberi and Konstantin Beznosov, The University of British Columbia
"It's Stored, Hopefully, on an Encrypted Server'': Mitigating Users' Misconceptions About FIDO2 Biometric WebAuthn
Leona Lassak, Ruhr University Bochum; Annika Hildebrandt, University of Chicago; Maximilian Golla, Max Planck Institute for Security and Privacy; Blase Ur, University of Chicago