POSTER: When and How to Implicitly Authenticate Smartphone Users. - Aaron Atwater; Hassan Khan 002; Urs Hengartner (CCS, 2014)

Itus: an implicit authentication framework for android. - Hassan Khan 002; Aaron Atwater; Urs Hengartner (MobiCom, 2014)

A Comparative Evaluation of Implicit Authentication Schemes. - Hassan Khan 002; Aaron Atwater; Urs Hengartner (RAID, 2014)

Towards application-centric implicit authentication on smartphones. - Hassan Khan 002; Urs Hengartner (HotMobile, 2014)

Usability and Security Perceptions of Implicit Authentication: Convenient, Secure, Sometimes Annoying. - Hassan Khan 002; Urs Hengartner; Daniel Vogel 001 (SOUPS, 2015)

Targeted Mimicry Attacks on Touch Input Based Implicit Authentication Schemes. - Hassan Khan 002; Urs Hengartner; Daniel Vogel 001 (MobiSys, 2016)

Ask Me Again But Don't Annoy Me: Evaluating Re-authentication Strategies for Smartphones. - Lalit Agarwal; Hassan Khan 002; Urs Hengartner (SOUPS, 2016)

Evaluating the Efficacy of Implicit Authentication Under Realistic Operating Scenarios. - Hassan Khan 002 (2016)

Evaluating Attack and Defense Strategies for Smartphone PIN Shoulder Surfing. - Hassan Khan 002; Urs Hengartner; Daniel Vogel 001 (CHI, 2018)

Augmented Reality-based Mimicry Attacks on Behaviour-Based Smartphone Authentication. - Hassan Khan 002; Urs Hengartner; Daniel Vogel 001 (MobiSys, 2018)

Widely Reused and Shared, Infrequently Updated, and Sometimes Inherited: A Holistic View of PIN Authentication in Digital Lives and Beyond. - Hassan Khan 002; Jason Ceci; Jonah Stegman; Adam J. Aviv; Rozita Dara 001; Ravi Kuber (ACSAC, 2020)

Chaperone: Real-time Locking and Loss Prevention for Smartphones. - Jiayi Chen 001; Urs Hengartner; Hassan Khan 002; Mohammad Mannan (USENIX Security Symposium, 2020)

Mimicry Attacks on Smartphone Keystroke Authentication. - Hassan Khan 002; Urs Hengartner; Daniel Vogel 001 (ACM Trans. Priv. Secur., 2020)

Concerned but Ineffective: User Perceptions, Methods, and Challenges when Sanitizing Old Devices for Disposal. - Jason Ceci; Hassan Khan 002; Urs Hengartner; Daniel Vogel 001 (SOUPS @ USENIX Security Symposium, 2021)

Sharing without Scaring: Enabling Smartphones to Become Aware of Temporary Sharing. - Jiayi Chen 001; Urs Hengartner; Hassan Khan 002 (SOUPS @ USENIX Security Symposium, 2022)

No Privacy in the Electronics Repair Industry. - Jason Ceci; Jonah Stegman; Hassan Khan 002 (SP, 2023)

"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software. - Jonah Stegman; Patrick J. Trottier; Caroline Hillier; Hassan Khan 002; Mohammad Mannan (USENIX Security Symposium, 2023)

Revisiting the Security of Biometric Authentication Systems Against Statistical Attacks. - Sohail Habib; Hassan Khan 002; Andrew Hamilton-Wright; Urs Hengartner (ACM Trans. Priv. Secur., 2023)

SHRIMPS: A framework for evaluating multi-user, multi-modal implicit authentication systems. - Jiayi Chen 001; Urs Hengartner; Hassan Khan 002 (Comput. Secur., 2024)

MRAAC: A Multi-stage Risk-aware Adaptive Authentication and Access Control Framework for Android. - Jiayi Chen 001; Urs Hengartner; Hassan Khan 002 (ACM Trans. Priv. Secur., 2024)

"I'm regretting that I hit run": In-situ Assessment of Potential Malware. - Brandon Lit; Edward Crowder; Hassan Khan 002; Daniel Vogel 001 (USENIX Security Symposium, 2025)

"I know it's not right, but that's what it said to do": Investigating Trust in AI Chatbots for Cybersecurity Policy. - Brandon Lit; Edward Crowder; Daniel Vogel 001; Hassan Khan 002 (CoRR, 2025)