Lessons learned from the deployment of a smartphone-based access-control system. - Lujo Bauer; Lorrie Faith Cranor; Michael K. Reiter; Kami Vaniea (SOUPS, 2007)

User-Controllable Security and Privacy for Pervasive Computing. - Jason Cornwell; Ian Fette; Gary Hsieh; Madhu K. Prabaker; Jinghai Rao; Karen P. Tang; Kami Vaniea; Lujo Bauer; Lorrie Faith Cranor; Jason I. Hong; Bruce M. McLaren; Mike Reiter; et al. (HotMobile, 2007)

A user study of policy creation in a flexible access-control system. - Lujo Bauer; Lorrie Faith Cranor; Robert W. Reeder; Michael K. Reiter; Kami Vaniea (CHI, 2008)

Evaluating assistance of natural language policy authoring. - Kami Vaniea; Clare-Marie Karat; Joshua B. Gross; John Karat; Carolyn Brodie (SOUPS, 2008)

Real life challenges in access-control management. - Lujo Bauer; Lorrie Faith Cranor; Robert W. Reeder; Michael K. Reiter; Kami Vaniea (CHI, 2009)

Access control for home data sharing: evaluating social acceptability. - Michelle L. Mazurek; J. P. Arsenault; Joanna Bresee; Nitin Gupta 001; Iulia Ion; Christina Johns; Daniel Lee; Yuan Liang; Jenny Olsen; Brandon Salmon; Richard Shay; Kami Vaniea; et al. (CHI, 2010)

More than skin deep: measuring effects of the underlying model on access-control system usability. - Robert W. Reeder; Lujo Bauer; Lorrie Faith Cranor; Michael K. Reiter; Kami Vaniea (CHI, 2011)

Out of sight, out of mind: Effects of displaying access-control information near the item it controls. - Kami Vaniea; Lujo Bauer; Lorrie Faith Cranor; Michael K. Reiter (PST, 2012)

Betrayed by updates: how negative experiences affect future security. - Kami Vaniea; Emilee J. Rader; Rick Wash (CHI, 2014)

Out of the Loop: How Automated Software Updates Cause Unintended Security Consequences. - Rick Wash; Emilee J. Rader; Kami Vaniea; Michelle Rizor (SOUPS, 2014)

Factors Related to Privacy Concerns and Protection Behaviors Regarding Behavioral Advertising. - Donghee Yvette Wohn; Jacob Solomon; Dan Sarkar; Kami Vaniea (CHI Extended Abstracts, 2015)

Tales of Software Updates: The process of updating software. - Kami Vaniea; Yasmeen Rashidi (CHI, 2016)

Debunking Security-Usability Tradeoff Myths. - M. Angela Sasse; Matthew Smith 001; Cormac Herley; Heather Lipford; Kami Vaniea (IEEE Secur. Priv., 2016)

Was my message read?: Privacy and Signaling on Facebook Messenger. - Roberto Hoyle; Srijita Das 001; Apu Kapadia; Adam J. Lee; Kami Vaniea (CHI, 2017)

Viewing the Viewers: Publishers' Desires and Viewers' Privacy Concerns in Social Networks. - Roberto Hoyle; Srijita Das 001; Apu Kapadia; Adam J. Lee; Kami Vaniea (CSCW, 2017)

Capturing the Connections: Unboxing Internet of Things Devices. - Kami Vaniea; Ella Tallyn; Chris Speed (CoRR, 2017)

Automatic Phishing Detection vesus User Training, Is there a Middle Ground Using XAI? - Sara Albakry; Kami Vaniea (SICSA ReaLX, 2018)

A Review of Human- and Computer-Facing URL Phishing Features. - Kholoud Althobaiti; Ghaidaa Rummani; Kami Vaniea (EuroS&P Workshops, 2019)

A Survey on Developer-Centred Security. - Mohammad Tahaei; Kami Vaniea (EuroS&P Workshops, 2019)

"I Don't Know Too Much About It": On the Security Mindsets of Computer Science Students. - Mohammad Tahaei; Adam D. G. Jenkins; Kami Vaniea; Maria Wolters (STAST, 2019)

What is this URL's Destination? Empirical Evaluation of Users' URL Reading. - Sara Albakry; Kami Vaniea; Maria K. Wolters (CHI, 2020)

RubikAuth: Fast and Secure Authentication in Virtual Reality. - Florian Mathis; John Williamson 001; Kami Vaniea; Mohamed Khamis (CHI Extended Abstracts, 2020)

Understanding Privacy-Related Questions on Stack Overflow. - Mohammad Tahaei; Kami Vaniea; Naomi Saphra (CHI, 2020)

"Anyone Else Seeing this Error?": Community, System Administrators, and Patch Information. - Adam D. G. Jenkins; Pieris Kalligeros; Kami Vaniea; Maria K. Wolters (EuroS&P, 2020)

Analysis of publicly available anti-phishing webpages: contradicting information, lack of concrete advice and very narrow attack vector. - Mattia Mossano; Kami Vaniea; Lukas Aldag; Reyhan Düzgün; Peter Mayer 001; Melanie Volkamer (EuroS&P Workshops, 2020)

Analysing Privacy Leakage of Life Events on Twitter. - Dilara Keküllüoglu; Walid Magdy; Kami Vaniea (WebSci, 2020)

I Don't Need an Expert! Making URL Phishing Features Human Comprehensible. - Kholoud Althobaiti; Nicole Meng; Kami Vaniea (CHI, 2021)

RepliCueAuth: Validating the Use of a Lab-Based Virtual Reality Setup for Evaluating Authentication Systems. - Florian Mathis; Kami Vaniea; Mohamed Khamis (CHI, 2021)

Privacy Champions in Software Teams: Understanding Their Motivations, Strategies, and Challenges. - Mohammad Tahaei; Alisa Frik; Kami Vaniea (CHI, 2021)

"Developers Are Responsible": What Ad Networks Tell Developers About Privacy. - Mohammad Tahaei; Kami Vaniea (CHI Extended Abstracts, 2021)

Security Notifications in Static Analysis Tools: Developers' Attitudes, Comprehension, and Ability to Act on Them. - Mohammad Tahaei; Kami Vaniea; Konstantin Beznosov; Maria K. Wolters (CHI, 2021)

Observing Virtual Avatars: The Impact of Avatars' Fidelity on Identifying Interactions. - Florian Mathis; Kami Vaniea; Mohamed Khamis (MindTrek, 2021)

Deciding on Personalized Ads: Nudging Developers About User Privacy. - Mohammad Tahaei; Alisa Frik; Kami Vaniea (SOUPS @ USENIX Security Symposium, 2021)

A Case Study of Phishing Incident Response in an Educational Organization. - Kholoud Althobaiti; Adam D. G. Jenkins; Kami Vaniea (Proc. ACM Hum. Comput. Interact., 2021)

Owning and Sharing: Privacy Perceptions of Smart Speaker Users. - Nicole Meng; Dilara Keküllüoglu; Kami Vaniea (Proc. ACM Hum. Comput. Interact., 2021)

Fast and Secure Authentication in Virtual Reality Using Coordinated 3D Manipulation and Pointing. - Florian Mathis; John H. Williamson 001; Kami Vaniea; Mohamed Khamis (ACM Trans. Comput. Hum. Interact., 2021)

Stay Home! Conducting Remote Usability Evaluations of Novel Real-World Authentication Systems Using Virtual Reality. - Florian Mathis; Joseph O'Hagan; Kami Vaniea; Mohamed Khamis (AVI, 2022)

Context-Based Clustering to Mitigate Phishing Attacks. - Tarini Saka; Kami Vaniea; Nadin Kökciyan (AISec@CCS, 2022)

Understanding Privacy Switching Behaviour on Twitter. - Dilara Keküllüoglu; Kami Vaniea; Walid Magdy (CHI, 2022)

Recruiting Participants With Programming Skills: A Comparison of Four Crowdsourcing Platforms and a CS Student Mailing List. - Mohammad Tahaei; Kami Vaniea (CHI, 2022)

From an Authentication Question to a Public Social Event: Characterizing Birthday Sharing on Twitter. - Dilara Keküllüoglu; Walid Magdy; Kami Vaniea (ICWSM, 2022)

Virtual Reality Observations: Using Virtual Reality to Augment Lab-Based Shoulder Surfing Research. - Florian Mathis; Joseph O'Hagan; Mohamed Khamis; Kami Vaniea (VR, 2022)

Can I Borrow Your ATM? Using Virtual Reality for (Simulated) In Situ Authentication Research. - Florian Mathis; Kami Vaniea; Mohamed Khamis (VR, 2022)

Embedding Privacy Into Design Through Software Developers: Challenges & Solutions. - Mohammad Tahaei; Kami Vaniea; Awais Rashid (CoRR, 2022)

Prototyping Usable Privacy and Security Systems: Insights from Experts. - Florian Mathis; Kami Vaniea; Mohamed Khamis (Int. J. Hum. Comput. Interact., 2022)

Understanding Privacy-Related Advice on Stack Overflow. - Mohammad Tahaei; Tianshi Li 001; Kami Vaniea (Proc. Priv. Enhancing Technol., 2022)

Multi-User Smart Speakers - A Narrative Review of Concerns and Problematic Interactions. - Nicole Meng-Schneider; Rabia Yasa Kostas; Kami Vaniea; Maria K. Wolters (CHI Extended Abstracts, 2023)

DarkDialogs: Automated detection of 10 dark patterns on cookie dialogs. - Daniel Kirkman; Kami Vaniea; Daniel W. Woods (EuroS&P, 2023)

Using Clustering Algorithms to Automatically Identify Phishing Campaigns. - Kholoud Althobaiti; Maria K. Wolters; Nawal Alsufyani; Kami Vaniea (IEEE Access, 2023)

To Patch, or not To Patch? That is the Question: A Case Study of System Administrators' Online Collaborative Behaviour. - Adam D. G. Jenkins; Maria Wolters; Kami Vaniea (CoRR, 2023)

Embedding Privacy Into Design Through Software Developers: Challenges and Solutions. - Mohammad Tahaei; Kami Vaniea; Awais Rashid (IEEE Secur. Priv., 2023)

Twitter has a Binary Privacy Setting, are Users Aware of How It Works? - Dilara Keküllüoglu; Kami Vaniea; Maria K. Wolters; Walid Magdy (Proc. ACM Hum. Comput. Interact., 2023)

Not as easy as just update: Survey of System Administrators and Patching Behaviours. - Adam D. G. Jenkins; Linsen Liu; Maria K. Wolters; Kami Vaniea (CHI, 2024)

PhishCoder: Efficient Extraction of Contextual Information from Phishing Emails. - Tarini Saka; Kami Vaniea; Nadin Kökciyan (ESORICS Workshops (2), 2024)

Phishing Codebook: A Structured Framework for the Characterization of Phishing Emails. - Tarini Saka; Rachiyta Jain; Kami Vaniea; Nadin Kökciyan (CoRR, 2024)

Judging Phishing Under Uncertainty: How Do Users Handle Inaccurate Automated Advice? - Tarini Saka; Kalliopi Vakali; Adam D. G. Jenkins; Nadin Kokciyan; Kami Vaniea (CHI, 2025)

SoK: Grouping Spam and Phishing Email Threats for Smarter Security. - Tarini Saka; Kami Vaniea; Nadin Kökciyan (IEEE Access, 2025)