Publications

@article{mayer2023awareness,
author = {Mayer, Peter and Zou, Yixin and Lowens, Byron M. and Dyer, Hunter A. and Le, Khue and Schaub, Florian and Aviv, Adam J.},
title = {Awareness, Intention, (In)Action: Individuals’ Reactions to Data Breaches},
year = {2023},
issue_date = {October 2023},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {30},
number = {5},
issn = {1073-0516},
url = {https://doi.org/10.1145/3589958},
doi = {10.1145/3589958},
journal = {ACM Trans. Comput.-Hum. Interact.},
month = {sep},
articleno = {77},
numpages = {53},
}
         

@inproceedings{baily2023pinguessing,
author = {Bailey, Daniel V. and Munyendo, Collins W. and Dyer, Hunter A. and Grant, Miles and Markert, Philipp and Aviv, Adam J.},
title = {"Someone Definitely Used 0000":  Strategies, Performance, and User Perception of Novice Smartphone-Unlock PIN-Guessers},
year = {2023},
isbn = {9798400708145},
url = {https://doi.org/10.1145/3617072.3617113},
doi = {10.1145/3617072.3617113},
booktitle = {Proceedings of the 2023 European Symposium on Usable Security},
pages = {158–174},
numpages = {17},
location = {Copenhagen, Denmark},
series = {EuroUSEC '23}
}
         

@inproceedings{munyendo2023pmswitching,
booktitle={30th ACM Conference on Computer and Communication Security},
series={CCS'23},
publisher={ACM},
title={"I just stopped using one and started using the other": Mitivations, Techniques, and Challenges When Siwtching Password Managers},
author={Collins W. Munynedo and Peter Mayer and Adam J. Aviv},
year={2023},
month={Nov}
}
         

@inproceedings{balash2023educators,
author={David G. Balash and Rahel A. Fainchtein and Elena Korkes and Miles Grant and Micah Sherr and Adam J. Aviv},
booktitle={Proceedings of the 32nd USENIX Security Symposium},
title={Educators’ Perspectives of Using (or Not Using) Online Exam Proctoring},
series={Sec'23},
month={Aug},
year={2023},
publisher={USENIX},
url={https://www.usenix.org/conference/usenixsecurity23/presentation/balash},
arxiv={https://arxiv.org/abs/2302.12936},
artifact={https://github.com/gwusec/2023-USENIX-Educator-Perspectives-of-Exam-Proctoring},
}
         

@inproceedings{munyendo2023cybercafes,
booktitle = {2023 IEEE Symposium on Security and Privacy},
title = {"In Eighty Percent of the Cases, I Select the Password for Them": Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya},
author ={Collins Munyendo and Yasemin Acar  and Adam J. Aviv},
year = {2023},
pages = {570-587},
keywords = {cybercafes;kenya;security;privacy},
doi = {10.1109/SP46215.2023.00130},
url = {https://doi.ieeecomputersociety.org/10.1109/SP46215.2023.00130},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
month = {may},
series={SP'23},
documenturl = {/papers/munyendo-sp23.pdf}
}
         

@inproceedings{berger2023cadance,
author = {Berger, Harel and Sherr, Micah and Aviv, Adam},
title = {Cadence: A Simulator for Human Movement-Based Communication Protocols},
year = {2023},
isbn = {9798400707889},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3607505.3607507},
doi = {10.1145/3607505.3607507},
booktitle = {Proceedings of the 16th Cyber Security Experimentation and Test Workshop},
pages = {26–31},
numpages = {6},
location = {Marina del Rey, CA, USA},
series = {CSET '23}
}
         

@inproceedings{fainchein2022smartDNS,
title={User Perceptions of the Privacy and Usability of Smart DNS},
booktitle={Annual Computer Security Applications Conference},
author= {Rahel A. Fainchtein and Adam J. Aviv and Micah Sherr},
url={https://dl.acm.org/doi/abs/10.1145/3564625.3567978},
series={ACSAC'22},
month={Dec},
year={2022}}
         

@inproceedings{wu2022fivewords,
title={User Perceptions of Five-Word Passwords},
booktitle={Annual Computer Security Applications Conference},
author= {Xiaoyuan Wu and Collins W. Munyendo and Eddie Cosic and Genevieve A. Flynn and Olivia Legault and Adam J. Aviv},
url={https://dl.acm.org/doi/abs/10.1145/3564625.3567981},
series={ACSAC'22},
month={Dec},
year={2022}}
         

@inproceedings {mayer2022pms,
  title = {Why Users (Don't) Use Password Managers at a Large Educational Institution},
  booktitle = {31st {USENIX} Security Symposium ({USENIX} Security 22)},
  author = {Peter Mayer and Collins W. Munyendo and Michelle L. Mazurek and Adam J. Aviv},
  year = {2022},
  publisher = {{USENIX} Association},
  series={Sec'22},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/mayer},
  month = Aug,
  artifact={https://github.com/gwusec/2022-USENIX-Password-Managers},
}
         

@inproceedings {munyendo2022pins4to6,
  title = {"The Same PIN, Just Longer": On the (In)Security of Upgrading PINs from 4 to 6 Digits},
  booktitle = {31st {USENIX} Security Symposium ({USENIX} Security 22)},
  author = {Collins W. Munyendo and Philipp Markert and Alexandra Nisenoff and Miles Grant and Elena Korkes and Blase Ur and Adam J. Aviv},
  year = {2022},
  publisher = {{USENIX} Association},
  series={Sec'22},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/munyendo},
  month = Aug,
}
         

@inproceedings{balash2022apipriv,
title={Security and Privacy Perceptions of Third-Party Application Access for Google Accounts},
booktitle = {31st {USENIX} Security Symposium ({USENIX} Security 22)},
author={David G. Balash and Xiaoyuan Wu and Miles Grant and Irwin Reyes and Adam J. Aviv},
year={2022},
publisher = {{USENIX} Association},
series={Sec'22},
month={Aug},
url={https://www.usenix.org/conference/usenixsecurity22/presentation/balash},
}
         

@inproceedings{munyendo2022loanapps,
title={``Desperate Times Call for Desperate Measures:'' User Concerns with Mobile Loan Apps in Kenya.},
booktitle={43rd IEEE Symposium on Security and Privacy},
author ={Collins Munyendo and Yasemin Acar and and Adam J. Aviv},
year=2022,
month={May},
publisher={IEEE},
series={SP'22},
url={https://ieeexplore.ieee.org/document/9833779},
}
         

@inproceedings{mink2022epz,
title={Users Can Deduce Sensitive Locations Protected by Privacy Zones on Fitness Tracking Apps},
booktitle={ACM CHI Conference on Human Factors in Computing Systems},
author={Jaron Mink and Amanda Rose Yuile and Uma Pal and Adam J. Aviv and Adam Bates},
year={2022},
publisher={ACM},
month={May},
url={https://dl.acm.org/doi/10.1145/3491102.3502136},
}
         

@inproceedings{ray2022investigating,
title={Investigating Older Adults’ Adoption and Usage of Online Conferencing Tools During COVID-19},
booktitle={19th International Web for All Conference (W4A '22)},
author={Hirak Ray and Ravi Kuber and Adam J. Aviv},
publisher={ACM},
month={Aprile},
year={2022},
url={https://dl.acm.org/doi/10.1145/3493612.3520447},
}
         

@article{ray2021warnthem,
  author = {Hirak Ray and Flynn Wolf and Ravi Kuber and Adam J. Aviv},
  journal = {Proceedings on Privacy Enhancing Technologies (PoPETS)},
  month = {July},
  title = {{``Warn Them'' or ``Just Block Them''?: Comparing Privacy Concerns of Older and Working Age Adults}},
  year = {2021},
  pdf={https://petsymposium.org/2021/files/papers/issue2/popets-2021-0016.pdf},
  video={https://www.youtube.com/watch?v=RjsVYGbOg3U},
}
         

@article{fainchtein2021sdns,
  author = {Rahel A. Fainchtein and Adam J. Aviv and Micah Sherr and Stephen Ribaudo and Armaan Khullar},
  journal = {Proceedings on Privacy Enhancing Technologies (PoPETS)},
  month = {July},
  title = {{Holes in the Geofence: Privacy Vulnerabilities in ``Smart'' DNS Services}},
  year = {2021},
  arxiv= {https://arxiv.org/abs/2012.07944},
  pdf={https://petsymposium.org/2021/files/papers/issue2/popets-2021-0022.pdf},
  video={https://www.youtube.com/watch?v=RjsVYGbOg3U},
}
         

@article{markert2021unlockpins,
author = {Markert, Philipp and Bailey, Daniel V. and Golla, Maximilian and D\"{u}rmuth, Markus and Aviv, Adam J.},
title = {On the Security of Smartphone Unlock PINs},
year = {2021},
issue_date = {November 2021},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {24},
number = {4},
issn = {2471-2566},
url = {https://doi.org/10.1145/3473040},
doi = {10.1145/3473040},
journal = {ACM Trans. Priv. Secur.},
month = sep,
articleno = {30},
numpages = {36},
keywords = {usability, smartphone, authentication, blocklist, PIN, mobile, Security}
}
         

@inproceedings {munyendo2021blocklists,
title={Using a Blocklist to Improve the Security of User Selection of Android Patterns},
booktitle={17th Symposium on Usable Security and Privacy},
author={Collins Munyendo and Miles Grant and Philipp Markert and Timothy J. Forman and Adam J. Aviv},
year={2021},
series={SOUPS'21},
month={Aug},
url = {https://www.usenix.org/conference/soups2021/presentation/munyendo},
pdf = {https://www.usenix.org/system/files/soups2021-munyendo.pdf}, 
}
         

@inproceedings {balash2021examining,
title={Examining the Examiners: Students' Privacy and Security Perceptions of Online Proctoring Services},
booktitle={17th Symposium on Usable Security and Privacy},
author={David G. Balash and Dongkun Kim and Darika Shaibekova and Rahel A. Fainchtein and Micah Sherr and Adam J. Aviv},
year={2021},
series={SOUPS'21},
month={Aug},
arxiv={https://arxiv.org/abs/2106.05917},
url = {https://www.usenix.org/conference/soups2021/presentation/balash},
pdf = {https://www.usenix.org/system/files/soups2021-balash.pdf}, 
}
         

@inproceedings {baily2021signal,
title={``I have no idea what they're trying to accomplish:'' Enthusiastic and Casual Signal Users' Understanding of Signal PINs},
booktitle={17th Symposium on Usable Security and Privacy},
author={Daniel V. Baily and Philipp Markert and Adam J. Aviv},
year={2021},
series={SOUPS'21},
month={Aug},
url = {https://www.usenix.org/conference/soups2021/presentation/baily},
pdf = {https://www.usenix.org/system/files/soups2021-bailey.pdf}, 
}
         

@inproceedings {wolf2021ciso,
  title = {Security Obstacles and Motivationsfor Small Businesses from a CISO’s Perspective},
  booktitle = {30th {USENIX} Security Symposium ({USENIX} Security 21)},
  author = {Flynn Wolf and Adam J. Aviv and Ravi Kuber},
  year = {2021},
  publisher = {{USENIX} Association},
  series={Sec'21},
  month = aug,
  url = {https://www.usenix.org/conference/usenixsecurity21/presentation/wolf},
  pdf = {https://www.usenix.org/system/files/sec21-wolf.pdf},
}
         

@inproceedings {farke2021dashboards,
  title = {Are Privacy Dashboards Good for End Users? Evaluating User Perceptions and Reactions to Google's My Activity},
  booktitle = {30th {USENIX} Security Symposium ({USENIX} Security 21)},
  author = {Florian Farke and David G. Balash and Maximilian Golla and Markus Dürmuth and Adam J. Aviv},
  year = {2021},
  publisher = {{USENIX} Association},
  series={Sec'21},
  arxiv={https://arxiv.org/abs/2105.14066},
  url = {https://www.usenix.org/conference/usenixsecurity21/presentation/farke},
  pdf = {https://www.usenix.org/system/files/sec21-farke.pdf}, 
  month = aug,
}
         

@inproceedings {warford2021strategies,
  title = {Strategies and Perceived Risks of Sending Sensitive Documents},
  booktitle = {30th {USENIX} Security Symposium ({USENIX} Security 21)},
  author = {Noel Warford and Collins W. Munyendo and Ashna Mediratta and Adam J. Aviv and Michelle L. Mazurek},
  year = {2021},
  publisher = {{USENIX} Association},
  series={Sec'21},
  arxiv={https://arxiv.org/abs/2105.14619},
  url = {https://www.usenix.org/conference/usenixsecurity21/presentation/warford},
  pdf = {https://www.usenix.org/system/files/sec21-warford.pdf}, 
  month = aug,
}
         

@inproceedings {mayer2021nowimangry,
  title = {"Now I'm a bit angry:" Individuals' Awareness, Perception, and Responses to Data Breaches that Affected Them},
  booktitle = {30th {USENIX} Security Symposium ({USENIX} Security 21)},
  author = {Peter Mayer and Yixin Zou and Florian Schaub and Adam J. Aviv},
  year = {2021},
  url = {https://www.usenix.org/conference/usenixsecurity21/presentation/mayer},
  publisher = {{USENIX} Association},
  series={Sec'21},
  pdf = {https://www.usenix.org/system/files/sec21-mayer.pdf}, 
  month = aug,
}
         

@inproceedings{martiny2021signal,
  title = {Improving Signal’s Sealed Sender},
  author = {Ian Martiny and Gabriel Kaptchuk and Adam J. Aviv and Daniel S. Roche and Eric Wustrow},
  booktitle = {Network and Distributed Systems Security Symposium},
  series = {NDSS'21},
  month = {Feb},
  year = {2021},
  url = {https://www.ndss-symposium.org/ndss-paper/improving-signals-sealed-sender/},
  documenturl = {papers/martiny2021signal.pdf}
 }
         

@inproceedings{ray2021olderadults,
    title={Why Older Adults (Don't) Use Password Managers},
    author={Hirak Ray and Flynn Wolf and Ravi Kuber and Adam J. Aviv},
    year={2021},
    month={Aug},
      booktitle = {30th {USENIX} Security Symposium ({USENIX} Security 21)},
    series={Sec'21},
    arxiv={https://arxiv.org/abs/2010.01973}
}
         

@inproceedings{forman2020doublepatterns,
    title={Double Patterns: A Usable Solution to Increase the Security of Android Unlock Patterns},
    author={Timothy J. Forman and Adam J. Aviv},
    year={2020},
    month={Dec},
    booktitle={2020 Annual Computer Security Conference},
    series={ACSAC'20},
    arxiv={https://arxiv.org/abs/2008.10681},
    url={https://dl.acm.org/doi/10.1145/3427228.3427252}
}
         

@inproceedings{kahn2020widely,
    title={Widely Reused and Shared, Infrequently Updated, and Sometimes Inherited: A Holistic View of PIN Authentication in Digital Lives and Beyond},
    author={Hassan Khan and Jason Ceci and Jonah Stegman and Adam J. Aviv and Rozita Dara and Ravi Kuber},
    year={2020},
    month={Dec},
    booktitle={2020 Annual Computer Security Conference},
    series={ACSAC'20},
    arxiv={https://arxiv.org/abs/2008.10697},
    url={https://dl.acm.org/doi/10.1145/3427228.3427240}
}
         

@inproceedings{samuel2020knock,
    title={Knock, Knock. Who's There? On the Security of LG's Knock Codes},
    author={Raina Samuel and Philipp Markert and Adam J. Aviv and Iulian Neamtiu},
    year={2020},
    month={August},
    pages={1-24},
    publisher= {USENIX},
    booktitle={2020 Symposium on Usable Security and Privacy},
    series={SOUPS'20},
    url ={https://www.usenix.org/conference/soups2020/presentation/samuel},
    video={https://2459d6dc103cb5933875-c0245c5c937c5dedcca3f1764ecc9b2f.ssl.cf2.rackcdn.com/soups2020/1_authentication_long_optional/3_soups2020-paper79-optional-presentation-video-final.mp4},
    slides={https://www.usenix.org/system/files/soups2020-paper79-slides-samuel.pdf},
    arxiv={https://arxiv.org/abs/2006.03556},
    documenturl={https://www.usenix.org/system/files/soups2020-samuel.pdf}
}
         

@INPROCEEDINGS {markert2020thispin,
author = {Philipp Markert and Daniel V. Bailey and Maximillian Golla and Markus Duermuth and Adam J. Aviv},
booktitle = {2020 IEEE Symposium on Security and Privacy (SP)},
title = {This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs},
year = {2020},
volume = {},
issn = {2375-1207},
pages = {1525-1542},
keywords = {authentication;pin;blacklist;mobile;smartphone;security;usability},
doi = {10.1109/SP40000.2020.00100},
url = {https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00100},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
month = {may}
}
         

@inproceedings{forman2020double,
author = {Forman, Timothy J. and Roche, Daniel S. and Aviv, Adam J.},
title = {Twice as Nice? A Preliminary Evaluation of Double Android Unlock Patterns},
year = {2020},
isbn = {9781450368193},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3334480.3382922},
doi = {10.1145/3334480.3382922},
booktitle = {Extended Abstracts of the 2020 CHI Conference on Human Factors in Computing Systems},
pages = {1–7},
numpages = {7},
keywords = {android patterns, usability, security, mobile authentication},
location = {Honolulu, HI, USA},
series = {CHI EA ’20}
}
         

@inproceedings{ray2019woe,
author={Hirak Ray and Flynn Wolf and Ravi Kuber and Adam J. Aviv},
title={"Woe is me:" Examining Older Adults' Perceptions of Privacy},
booktitle={Extended Abstracts of the 2019 CHI Conference on Human Factors in Computing Systems},
series={CHI EA '19},
year={2019},
pages = {LBW2611:1--LBW2611:6},
publisher={ACM},
doi={10.1145/3290607.3312770},
url={https://doi.org/10.1145/3290607.3312770},
documenturl={papers/ray2019woe.pdf}
}
         

@inproceedings{wolf2019musthave,
author = {Wolf, Flynn and Kuber, Ravi and Aviv, Adam J.},
 title = {"Pretty Close to a Must-Have": Balancing Usability Desire and Security Concern in Biometric Adoption},
 booktitle = {Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems},
 series = {CHI '19},
 year = {2019},
 isbn = {978-1-4503-5970-2},
 location = {Glasgow, Scotland Uk},
 pages = {151:1--151:12},
 articleno = {151},
 url = {http://doi.acm.org/10.1145/3290605.3300381},
 doi = {10.1145/3290605.3300381},
 acmid = {3300381},
 publisher = {ACM},
}
         

@inproceedings{chakraborti2019rOram,
author={Anrin Chakraborti and Adam J. Aviv and Seung Geol Choi and Travis Mayberry and Daniel S. Roche and Radu Sion},
title={ rORAM: Efficient Range ORAM with O(log^2 N) Locality},
booktitle={Symposium on the Network and Distributed Systems Security},
series={NDSS'19},
publisher={ISOC},
year={2019},
location={San Diego, CA},
url={https://dx.doi.org/10.14722/ndss.2019.23320},
doi={10.14722/ndss.2019.23320},
}
         

@inproceedings{golla2019inaccuracy,
  title={Work in Progress: On the In-Accuracy and Influence of Android Pattern Strength Meters},
  booktitle={Workshop on Usable Security},
  series={USEC'19},
  author={Maximilian Golla and Jan Rimkus and Adam J. Aviv and Markus Duermuth},
  year={2019},
  url={https://dx.doi.org/10.14722/usec.2019.23025},
  doi={10.14722/usec.2019.23025},
  documenturl={papers/golla-usec19.pdf}
}
         

@article{wolf2018start,
author = {Flynn Wolf and Adam J. Aviv and Ravi Kuber},
title = {"{I}t’s all about the start" classifying eyes-free mobile authentication techniques},
journal = {Journal of Information Security and Applications},
volume = {41},
pages = {28 - 40},
year = {2018},
issn = {2214-2126},
doi = {https://doi.org/10.1016/j.jisa.2018.05.004},
url = {https://www.sciencedirect.com/science/article/pii/S2214212618301315}
}
         

@article{guixin2018video,
 author = {Ye, Guixin and Tang, Zhanyong and Fang, Dingyi and Chen, Xiaojiang and Wolff, Willy and Aviv, Adam J. and Wang, Zheng},
 title = {A Video-based Attack for Android Pattern Lock},
 journal = {ACM Transactions on Privacy and Security (TOPS)},
 issue_date = {October 2018},
 volume = {21},
 number = {4},
 month = jul,
 year = {2018},
 issn = {2471-2566},
 pages = {19:1--19:31},
 articleno = {19},
 numpages = {31},
 url = {http://doi.acm.org/10.1145/3230740},
 doi = {10.1145/3230740},
 publisher = {ACM},
}
         

@article{wolf2018empirical,
  title={An empirical study examining the perceptions and behaviours of security-conscious users of mobile authentication},
  author={Wolf, Flynn and Kuber, Ravi and Aviv, Adam J},
  journal={Behaviour \& Information Technology},
  volume={37},
  number={4},
  pages={320--334},
  year={2018},
  publisher={Taylor \& Francis}
}
         

@inproceedings {aviv2018comparing,
author = {Adam J. Aviv and Flynn Wolf and Ravi Kuber},
title = {Comparing Video Based Shoulder Surfing with Live Simulation},
booktitle = {Annual Computer Security Applications Conference},
year = {2018},
series={ACSAC'18},
url = {https://dl.acm.org/citation.cfm?id=3274702},
doi= {10.1145/3274694.3274702},
arxiv = {https://arxiv.org/abs/1809.08640},
}
         

@inproceedings {sonchack2018scaling,
  author = {John Sonchack and Oliver Michel and Adam J. Aviv and Eric Keller and Jonathan M. Smith},
  title = {Scaling Hardware Accelerated Network Monitoring to Concurrent and Dynamic Queries With *Flow},
  booktitle = {2018 {USENIX} Annual Technical Conference ({ATC}'18)},
  year = {2018},
  address = {Boston, MA},
  url = {https://www.usenix.org/conference/atc18/presentation/sonchack},
  publisher = {{USENIX} Association},
}
         

@inproceedings{wolf2018how,
 author = {Wolf, Flynn and Kuber, Ravi and Aviv, Adam J.},
 title = {How Do We Talk Ourselves Into These Things?},
 booktitle = {Extended Abstracts of the 2018 CHI Conference on Human Factors in Computing Systems},
 series = {CHI EA '18},
 year = {2018},
 isbn = {978-1-4503-5621-3},
 location = {Montreal QC, Canada},
 pages = {LBW502:1--LBW502:6},
 articleno = {LBW502},
 numpages = {6},
 url = {http://doi.acm.org/10.1145/3170427.3188578},
 doi = {10.1145/3170427.3188578},
 acmid = {3188578},
 publisher = {ACM},
 address = {New York, NY, USA},
}
         

@inproceedings{sonchack2018turboflow,
 author = {Sonchack, John and Aviv, Adam J. and Keller, Eric and Smith, Jonathan M.},
 title = {Turboflow: Information Rich Flow Record Generation on Commodity Switches},
 booktitle = {Proceedings of the Thirteenth EuroSys Conference},
 series = {EuroSys '18},
 year = {2018},
 isbn = {978-1-4503-5584-1},
 location = {Porto, Portugal},
 pages = {11:1--11:16},
 articleno = {11},
 numpages = {16},
 url = {http://doi.acm.org/10.1145/3190508.3190558},
 doi = {10.1145/3190508.3190558},
 acmid = {3190558},
 publisher = {ACM},
 address = {New York, NY, USA},
}
         

@inproceedings{aviv2018towards,
  title={Towards Understanding Connections between Security/Privacy Attitudes and Unlock Authentication},
  booktitle={Workshop on Usable Security},
  series={USEC'18},
  author={Aviv, Adam J and Kuber, Ravi},
  url={https://dx.doi.org/10.14722/usec.2018.23011},
  doi={10.14722/usec.2018.23011},
  arxiv={http://arxiv.org/abs/1801.07518a},
  year={2018}
}
         

@inproceedings{wolf2018eyes,
title={Work-In-Progress: Performance of Eyes-Free Mobile Authentication},
author={Flynn Wolf and Adam J. Aviv and Ravi Kuber},
booktitle={Workshop on Usable Security},
url={https://dx.doi.org/10.14722/usec.2018.23013},
doi={10.14722/usec.2018.23013},
series={USEC'18},
year={2018}
}
         

@article{aviv2017bigger,
  title={Is Bigger Better When It Comes to Android Graphical Pattern Unlock?},
  author={Aviv, Adam J and Kuber, Ravi and Budzitowski, Devon},
  journal={IEEE Internet Computing},
  volume={21},
  number={6},
  pages={46--51},
  year={2017},
  publisher={IEEE},
  url={https://ieeexplore.ieee.org/document/8114690},
  doi={10.1109/MIC.2017.4180833}
}
         

@inproceedings{aviv2017towards,
 author = {Aviv, Adam J. and Davin, John T. and Wolf, Flynn and Kuber, Ravi},
 title = {Towards Baselines for Shoulder Surfing on Mobile Authentication},
 booktitle = {Proceedings of the 33rd Annual Computer Security Applications Conference},
 series = {ACSAC 2017},
 year = {2017},
 isbn = {978-1-4503-5345-8},
 location = {Orlando, FL, USA},
 pages = {486--498},
 numpages = {13},
 url = {http://doi.acm.org/10.1145/3134600.3134609},
 doi = {10.1145/3134600.3134609},
 acmid = {3134609},
 publisher = {ACM},
 address = {New York, NY, USA},
documenturl = {papers/aviv-acsac17.pdf}
}
         

@inproceedings{roche2017deterministic,
 author = {Roche, Daniel S. and Aviv, Adam and Choi, Seung Geol and Mayberry, Travis},
 title = {Deterministic, Stash-Free Write-Only ORAM},
 booktitle = {Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security},
 series = {CCS '17},
 year = {2017},
 isbn = {978-1-4503-4946-8},
 location = {Dallas, Texas, USA},
 pages = {507--521},
 numpages = {15},
 url = {http://doi.acm.org/10.1145/3133956.3134051},
 doi = {10.1145/3133956.3134051},
 acmid = {3134051},
 publisher = {ACM},
 address = {New York, NY, USA},
 documenturl={papers/roche-ccs17-deterministic.pdf}
}
         

@inproceedings{aviv2017oblivisync,
  author    = {Adam J. Aviv and
               Seung Geol Choi and
               Travis Mayberry and
               Daniel S. Roche},
  title     = {ObliviSync: Practical Oblivious File Backup and Synchronization},
  booktitle = {24th Annual Network and Distributed System Security Symposium, {NDSS}
               2017, San Diego, California, USA, February 26 - March 1, 2017},
  year      = {2017},
  url       = {https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/oblivisync-practical-oblivious-file-backup-and-synchronization/},
  timestamp = {Tue, 16 Jan 2018 15:44:17 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/ndss/AvivCMR17},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/ndss2017_01-2_Aviv_paper.pdf}
}
         

@article{sonchack2016exploring,
  title={Exploring large scale security system reproducibility with the LESS simulator},
  author={Sonchack, John and Aviv, Adam J},
  journal={Journal of Computer Security},
  volume={24},
  number={5},
  pages={645--665},
  year={2016},
  publisher={IOS Press}
}
         

@inproceedings{sonchack2016timing,
  author    = {John Sonchack and
               Anurag Dubey and
               Adam J. Aviv and
               Jonathan M. Smith and
               Eric Keller},
  title     = {Timing-based reconnaissance and defense in software-defined networks},
  booktitle = {Proceedings of the 32nd Annual Conference on Computer Security Applications,
               {ACSAC} 2016, Los Angeles, CA, USA, December 5-9, 2016},
  pages     = {89--100},
  year      = {2016},
  url       = {http://dl.acm.org/citation.cfm?id=2991081},
  timestamp = {Wed, 07 Dec 2016 11:05:29 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/acsac/SonchackDASK16},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/sonchack-ACASC-16.pdf}
}
         

@inproceedings{narkhede2016managing,
  author    = {Vaishali Narkhede and
               Karuna P. Joshi and
               Adam J. Aviv and
               Seung Geol Choi and
               Daniel S. Roche and
               Tim Finin},
  title     = {Managing Cloud Storage Obliviously},
  booktitle = {9th {IEEE} International Conference on Cloud Computing, {CLOUD} 2016,
               San Francisco, CA, USA, June 27 - July 2, 2016},
  pages     = {990--993},
  year      = {2016},
  url       = {https://doi.org/10.1109/CLOUD.2016.0151},
  doi       = {10.1109/CLOUD.2016.0151},
  timestamp = {Wed, 17 May 2017 14:24:56 +0200},
  biburl    = {https://dblp.org/rec/bib/conf/IEEEcloud/NarkhedeJACRF16},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}
         

@inproceedings{roche2016practical,
  author    = {Daniel S. Roche and
               Adam J. Aviv and
               Seung Geol Choi},
  title     = {A Practical Oblivious Map Data Structure with Secure Deletion and
               History Independence},
  booktitle = {{IEEE} Symposium on Security and Privacy, {SP} 2016, San Jose, CA,
               USA, May 22-26, 2016},
  pages     = {178--197},
  year      = {2016},
  url       = {https://doi.org/10.1109/SP.2016.19},
  doi       = {10.1109/SP.2016.19},
  timestamp = {Sat, 16 Sep 2017 12:10:30 +0200},
  biburl    = {https://dblp.org/rec/bib/conf/sp/RocheAC16},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}
         

@inproceedings{ali2016developing,
  title={Developing and evaluating a gestural and tactile mobile interface to support user authentication},
  author={Ali, Abdullah and Aviv, Adam J and Kuber, Ravi},
  booktitle={IConference 2016 Proceedings},
  year={2016},
  publisher={iSchools},
  documenturl={papers/ali-iconference16.pdf}
  
}
         

@inproceedings{sonchack2016enabling,
  author    = {John Sonchack and
               Jonathan M. Smith and
               Adam J. Aviv and
               Eric Keller},
  title     = {Enabling Practical Software-defined Networking Security Applications
               with {OFX}},
  booktitle = {23rd Annual Network and Distributed System Security Symposium, {NDSS}
               2016, San Diego, California, USA, February 21-24, 2016},
  year      = {2016},
  url       = {http://wp.internetsociety.org/ndss/wp-content/uploads/sites/25/2017/09/enabling-practical-software-defined-networking-security-applications-ofx.pdf},
  timestamp = {Tue, 16 Jan 2018 13:23:48 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/ndss/SonchackSAK16},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/sonchack-ndss16.pdf}
}
         

@inproceedings{aviv2016position,
title={Position Paper: Measuring the Impact of Al- phabet and Culture on Graphical Passwords},
author={Adam J. Aviv and Markus Duermuth and Payas Gupta},
booktitle={Who Are You?! Adventures in Authentication Workshop},
series={WAY'16},
year={2016}
}
         

@inproceedings{wolf2016preliminary,
title={Preliminary Findings from an Exploratory Qualitative Study of Security-Conscious Users of Mobile Authentication},
author={Flynn Wolf and Ravi Kuber and Adam J. Aviv},
booktitle={2nd Workshop on Security Information Workers},
series={WSIW'16},
year={2016},
}
         

@inproceedings{sonchack2016timing2,
  author    = {John Sonchack and
               Adam J. Aviv and
               Eric Keller},
  title     = {Timing {SDN} Control Planes to Infer Network Configurations},
  booktitle = {Proceedings of the 2016 {ACM} International Workshop on Security in
               Software Defined Networks {\&} Network Function Virtualization,
               SDN-NFV@CODASPY 2016, New Orleans, LA, USA, March 11, 2016},
  pages     = {19--22},
  year      = {2016},
  url       = {http://doi.acm.org/10.1145/2876019.2876030},
  doi       = {10.1145/2876019.2876030},
  timestamp = {Tue, 15 Mar 2016 10:03:36 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/codaspy/SonchackAK16},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl ={papers/sonchack-SDN-NFV16.pdf}
}
         

@inproceedings{aviv2016analyzing,
  title={Analyzing the impact of collection methods and demographics for android’s pattern unlock},
  author={Aviv, Adam J and Maguire, Justin and Prak, Jeanne Luning},
  booktitle={Workshop on Usable Security},
  series={USEC'16},
  year={2016},
  documenturl={papers/aviv-usec16.pdf}
}
         

@inproceedings{west2014urlquery,
title={On the Privacy Concerns of URL Query Strings},
author={Andrew West and Adam J. Aviv},
booktitle={Workshop on Web 2.0 Security and Privacy},
year={2016},
documenturl={papers/west_w2sp.pdf}
}
         

@article{sonchack2015cross,
  title={Cross-domain collaboration for improved IDS rule set selection},
  author={Sonchack, John and Aviv, Adam J and Smith, Jonathan M},
  journal={Journal of Information Security and Applications},
  volume={24},
  pages={25--40},
  year={2015},
  publisher={Elsevier}
}
         

@inproceedings{aviv2015bigger,
  author    = {Adam J. Aviv and
               Devon Budzitowski and
               Ravi Kuber},
  title     = {Is Bigger Better? Comparing User-Generated Passwords on 3x3 vs. 4x4
               Grid Sizes for Android's Pattern Unlock},
  booktitle = {Proceedings of the 31st Annual Computer Security Applications Conference,
               Los Angeles, CA, USA, December 7-11, 2015},
  pages     = {301--310},
  year      = {2015},
  url       = {http://doi.acm.org/10.1145/2818000.2818014},
  doi       = {10.1145/2818000.2818014},
  timestamp = {Tue, 15 Dec 2015 16:46:09 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/acsac/AvivBK15},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/aviv-acsac15.pdf}
}
         

@article{aviv2014privacy,
  title={Privacy-aware message exchanges for HumaNets},
  author={Aviv, Adam J and Blaze, Matt and Sherr, Micah and Smith, Jonathan M},
  journal={Computer Communications},
  volume={48},
  pages={30--43},
  year={2014},
  publisher={Elsevier},
  documenturl={papers/aviv-esorics12-privacy.pdf},
}
         

@article{west2014measuring,
  title={Measuring Privacy Disclosures in URL Query Strings},
  author={West, Andrew G and Aviv, Adam J},
  journal={IEEE Internet Computing},
  volume={18},
  number={6},
  pages={52--59},
  year={2014},
  publisher={IEEE},
  documenturl={papers/ieee-aviv-west.pdf}
}
         

@inproceedings{aviv2014understanding,
  author    = {Adam J. Aviv and
               Dane Fichter},
  title     = {Understanding visual perceptions of usability and security of Android's
               graphical password pattern},
  booktitle = {Proceedings of the 30th Annual Computer Security Applications Conference,
               {ACSAC} 2014, New Orleans, LA, USA, December 8-12, 2014},
  pages     = {286--295},
  year      = {2014},
  url       = {http://doi.acm.org/10.1145/2664243.2664253},
  doi       = {10.1145/2664243.2664253},
  timestamp = {Sat, 06 Dec 2014 14:20:32 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/acsac/AvivF14},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/p286-aviv.pdf}
}
         

@inproceedings{sonchack2014less,
  author    = {John Sonchack and
               Adam J. Aviv},
  title     = {{LESS} Is More: Host-Agent Based Simulator for Large-Scale Evaluation
               of Security Systems},
  booktitle = {Computer Security - {ESORICS} 2014 - 19th European Symposium on Research
               in Computer Security, Wroclaw, Poland, September 7-11, 2014. Proceedings,
               Part {II}},
  pages     = {365--382},
  year      = {2014},
  url       = {https://doi.org/10.1007/978-3-319-11212-1_21},
  doi       = {10.1007/978-3-319-11212-1_21},
  timestamp = {Tue, 23 May 2017 01:07:16 +0200},
  biburl    = {https://dblp.org/rec/bib/conf/esorics/SonchackA14},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}
         

@inproceedings{sonchack2013bridging,
  title={Bridging the Data Gap: Data Related Challenges in Evaluating Large Scale Collaborative Security Systems.},
  author={Sonchack, John and Aviv, Adam J and Smith, Jonathan M},
  booktitle={6th Workshop on Cybersecurity Evaluatoin and Testing},
  series={CSET'13},
  year={2013},
  documenturl={papers/jsonch_cset.pdf}
}
         

@article{aviv2012experiences,
  title={Experiences in teaching an educational user-level operating systems implementation project},
  author={Aviv, Adam J and Mannino, Vin and Owlarn, Thanat and Shannin, Seth and Xu, Kevin and Loo, Boon Thau},
  journal={ACM SIGOPS Operating Systems Review},
  volume={46},
  number={2},
  pages={80--86},
  year={2012},
  publisher={ACM},
  documenturl={papers/pennos.pdf}
}
         

@inproceedings{aviv2012practicality,
  author    = {Adam J. Aviv and
               Benjamin Sapp and
               Matt Blaze and
               Jonathan M. Smith},
  title     = {Practicality of accelerometer side channels on smartphones},
  booktitle = {28th Annual Computer Security Applications Conference, {ACSAC} 2012,
               Orlando, FL, USA, 3-7 December 2012},
  pages     = {41--50},
  year      = {2012},
  url       = {http://doi.acm.org/10.1145/2420950.2420957},
  doi       = {10.1145/2420950.2420957},
  timestamp = {Thu, 20 Dec 2012 09:09:21 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/acsac/AvivSBS12},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/aviv-acsac12-accel.pdf}
}
         

@inproceedings{aviv2012privacyaware,
  author    = {Adam J. Aviv and
               Micah Sherr and
               Matt Blaze and
               Jonathan M. Smith},
  title     = {Privacy-Aware Message Exchanges for Geographically Routed Human Movement
               Networks},
  booktitle = {Computer Security - {ESORICS} 2012 - 17th European Symposium on Research
               in Computer Security, Pisa, Italy, September 10-12, 2012. Proceedings},
  pages     = {181--198},
  year      = {2012},
  url       = {https://doi.org/10.1007/978-3-642-33167-1_11},
  doi       = {10.1007/978-3-642-33167-1_11},
  timestamp = {Fri, 02 Jun 2017 20:48:01 +0200},
  biburl    = {https://dblp.org/rec/bib/conf/esorics/AvivSBS12},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}
         

@phdthesis{phdthesis,
  author       = {Adam J. Aviv}, 
  title        = {Side Channels Enabled by Smartphone Interaction},
  school       = {University of Pennsylvania},
  year         = {2012},
  documenturl   = {papers/aviv-thesis.pdf}
}
         

@inproceedings{aviv2011challenges,
  title={Challenges in experimenting with botnet detection systems},
  author={Aviv, Adam J and Haeberlen, Andreas},
  booktitle={4th Workshop on Cybersecurity Evaluatoin and Testing},
  series={CSET'11},
  year={2011},
  documenturl={aviv_cset.pdf}
  
}
         

@inproceedings{west2010spam,
  author    = {Andrew G. West and
               Adam J. Aviv and
               Jian Chang and
               Insup Lee},
  title     = {Spam mitigation using spatio-temporal reputations from blacklist history},
  booktitle = {Twenty-Sixth Annual Computer Security Applications Conference, {ACSAC}
               2010, Austin, Texas, USA, 6-10 December 2010},
  pages     = {161--170},
  year      = {2010},
  url       = {http://doi.acm.org/10.1145/1920261.1920287},
  doi       = {10.1145/1920261.1920287},
  timestamp = {Tue, 12 Aug 2014 16:59:10 +0200},
  biburl    = {https://dblp.org/rec/bib/conf/acsac/WestACL10},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/acsac_10_final.pdf}
}
         

@inproceedings{aviv2010evading,
  title={Evading cellular data monitoring with human movement networks},
  author={Aviv, Adam J and Sherr, Micah and Blaze, Matt and Smith, Jonathan M},
  booktitle={5th {USENIX} Workhsop on Hot Topics in Security},
  series={HotSec'10},
  pages={1--9},
  year={2010},
}
         

@inproceedings{aviv2010smudge,
  title={Smudge Attacks on Smartphone Touch Screens.},
  author={Aviv, Adam J and Gibson, Katherine L and Mossop, Evan and Blaze, Matt and Smith, Jonathan M},
  booktitle={4th {USENIX} Workshop on  on Offensive Security},
  series={WOOT'10},
  year={2010},
  documenturl={papers/aviv-woot10.pdf}
}
         

@inproceedings{reed2010differential,
 author = {Reed, Jason and Aviv, Adam J. and Wagner, Daniel and Haeberlen, Andreas and Pierce, Benjamin C. and Smith, Jonathan M.},
 title = {Differential Privacy for Collaborative Security},
 booktitle = {Proceedings of the Third European Workshop on System Security},
 series = {EUROSEC '10},
 year = {2010},
 isbn = {978-1-4503-0059-9},
 location = {Paris, France},
 pages = {1--7},
 numpages = {7},
 url = {http://doi.acm.org/10.1145/1752046.1752047},
 doi = {10.1145/1752046.1752047},
 acmid = {1752047},
 publisher = {ACM},
 address = {New York, NY, USA},
}
         

@inproceedings{west2009quantm,
 author = {West, Andrew G. and Aviv, Adam J. and Chang, Jian and Prabhu, Vinayak S. and Blaze, Matt and Kannan, Sampath and Lee, Insup and Smith, Jonathan M. and Sokolsky, Oleg},
 title = {QuanTM: A Quantitative Trust Management System},
 booktitle = {Proceedings of the Second European Workshop on System Security},
 series = {EUROSEC '09},
 year = {2009},
 isbn = {978-1-60558-472-0},
 location = {Nuremburg, Germany},
 pages = {28--35},
 numpages = {8},
 url = {http://doi.acm.org/10.1145/1519144.1519149},
 doi = {10.1145/1519144.1519149},
 acmid = {1519149},
 publisher = {ACM},
 address = {New York, NY, USA},
}
         

@inproceedings{johnson2008rust,
  title={RUST: A Retargetable Usability Testbed for Web Site Authentication Technologies.},
  author={Johnson, Maritza L and Atreya, Chaitanya and Aviv, Adam J and Bellovin, Steven M and Kaiser, Gail E},
  booktitle={{USENIX} Workshop on Usability, Psychology and Security},
  series={UPSEC'08},
  year={2008},
  documenturl={papers/johnson.pdf}
}
         

@inproceedings{aviv2008security,
  title={Security evaluation of ES\&S voting machines and election management system},
  author={Aviv, Adam and Cerny, Pavol and Clark, Sandy and Cronin, Eric and Shah, Gaurav and Sherr, Micah and Blaze, Matt},
  booktitle={Conference on Electronic voting technology},
  pages={11},
  year={2008},
  organization={USENIX Association},
  documenturl={papers/ess-evt08.pdf}
}
         

@inproceedings{aviv2007ssares,
  author    = {Adam J. Aviv and
               Michael E. Locasto and
               Shaya Potter and
               Angelos D. Keromytis},
  title     = {{SSARES:} Secure Searchable Automated Remote Email Storage},
  booktitle = {23rd Annual Computer Security Applications Conference {(ACSAC} 2007),
               December 10-14, 2007, Miami Beach, Florida, {USA}},
  pages     = {129--139},
  year      = {2007},
  url       = {https://doi.org/10.1109/ACSAC.2007.30},
  doi       = {10.1109/ACSAC.2007.30},
  timestamp = {Wed, 10 Jan 2018 13:55:52 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/acsac/AvivLPK07},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  documenturl = {papers/aviv-SSARES.pdf}
}