Secure Public Instant Messaging. - Mohammad Mannan; Paul C. van Oorschot (PST, 2004)

On instant messaging worms, analysis and countermeasures. - Mohammad Mannan; Paul C. van Oorschot (WORM, 2005)

A Protocol for Secure Public Instant Messaging. - Mohammad Mannan; Paul C. van Oorschot (Financial Cryptography, 2006)

Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer. - Mohammad Mannan; Paul C. van Oorschot (Financial Cryptography, 2007)

Security and usability: the gap in real-world online banking. - Mohammad Mannan; Paul C. van Oorschot (NSPW, 2007)

Weighing Down "The Unbearable Lightness of PIN Cracking". - Mohammad Mannan; Paul C. van Oorschot (Financial Cryptography, 2008)

Localization of credential information to address increasingly inevitable data breaches. - Mohammad Mannan; Paul C. van Oorschot (NSPW, 2008)

Digital Objects as Passwords. - Mohammad Mannan; Paul C. van Oorschot (HotSec, 2008)

Privacy-enhanced sharing of personal content on the web. - Mohammad Mannan; Paul C. van Oorschot (WWW, 2008)

Reducing threats from flawed security APIs: The banking PIN case. - Mohammad Mannan; Paul C. van Oorschot (Comput. Secur., 2009)

Unicorn: two-factor attestation for data security. - Mohammad Mannan; Beom Heyn Kim; Afshar Ganjali; David Lie (CCS, 2011)

Mercury: Recovering Forgotten Passwords Using Personal Devices. - Mohammad Mannan; David Barrera 003; Carson D. Brown; David Lie; Paul C. van Oorschot (Financial Cryptography, 2011)

Leveraging personal devices for stronger password authentication from untrusted computers. - Mohammad Mannan; Paul C. van Oorschot (J. Comput. Secur., 2011)

User Study, Analysis, and Usable Security of Passwords Based on Digital Objects. - Robert Biddle; Mohammad Mannan; Paul C. van Oorschot; Tara Whalen (IEEE Trans. Inf. Forensics Secur., 2011)

Lightweight Client-Side Methods for Detecting Email Forgery. - Eric Lin; John Aycock; Mohammad Mannan (WISA, 2012)

Revisiting Defenses against Large-Scale Online Password Guessing Attacks. - Mansour Alsaleh; Mohammad Mannan; Paul C. van Oorschot (IEEE Trans. Dependable Secur. Comput., 2012)

Passwords for Both Mobile and Desktop Computers: ObPwd for Firefox and Android. - Mohammad Mannan; Paul C. van Oorschot (login Usenix Mag., 2012)

Passwords for Both Mobile and Desktop Computers Appendix. - Mohammad Mannan; Paul C. van Oorschot (login Usenix Mag., 2012)

On Implementing Deniable Storage Encryption for Mobile Devices. - Adam Skillen; Mohammad Mannan (NDSS, 2013)

Explicit authentication response considered harmful. - Lianying Zhao; Mohammad Mannan (NSPW, 2013)

Challenges and implications of verifiable builds for security-critical open-source software. - Xavier de Carné de Carnavalet; Mohammad Mannan (ACSAC, 2014)

Detection of malicious payload distribution channels in DNS. - A. Mert Kara; Hamad Binsalleeh; Mohammad Mannan; Amr M. Youssef; Mourad Debbabi (ICC, 2014)

From Very Weak to Very Strong: Analyzing Password-Strength Meters. - Xavier de Carné de Carnavalet; Mohammad Mannan (NDSS, 2014)

Mobiflage: Deniable Storage Encryptionfor Mobile Devices. - Adam Skillen; Mohammad Mannan (IEEE Trans. Dependable Secur. Comput., 2014)

Gracewipe: Secure and Verifiable Deletion under Coercion. - Lianying Zhao; Mohammad Mannan (NDSS, 2015)

Peace vs. Privacy: Leveraging Conflicting Jurisdictions for Email Security. - Mohammad Mannan; Arash Shahkar; Atieh Saberi Pirouz; Vladimir Rabotka (NSPW, 2015)

A Large-Scale Evaluation of High-Impact Password Strength Meters. - Xavier de Carné de Carnavalet; Mohammad Mannan (ACM Trans. Inf. Syst. Secur., 2015)

Sixth Annual ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM 2016). - Long Lu; Mohammad Mannan (CCS, 2016)

Hypnoguard: Protecting Secrets across Sleep-wake Cycles. - Lianying Zhao; Mohammad Mannan (CCS, 2016)

Killed by Proxy: Analyzing Client-end TLS Interception Software. - Xavier de Carné de Carnavalet; Mohammad Mannan (NDSS, 2016)

An evaluation of recent secure deduplication proposals. - Vladimir Rabotka; Mohammad Mannan (J. Inf. Secur. Appl., 2016)

Deceptive Deletion Triggers Under Coercion. - Lianying Zhao; Mohammad Mannan (IEEE Trans. Inf. Forensics Secur., 2016)

Short Paper: TLS Ecosystems in Networked Devices vs. Web Servers. - Nayanamana Samarasinghe; Mohammad Mannan (Financial Cryptography, 2017)

Towards a comprehensive analytical framework for smart toy privacy practices. - Moustafa Mahmoud; Md Zakir Hossen; Hesham Barakat; Mohammad Mannan; Amr M. Youssef (STAST, 2017)

Protecting Web Passwords from Rogue Servers using Trusted Execution Environments. - Klaudia Krawiecka; Arseny Kurnikov; Andrew Paverd; Mohammad Mannan; N. Asokan (CoRR, 2017)

Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials. - Arseny Kurnikov; Andrew Paverd; Mohammad Mannan; N. Asokan (ARES, 2018)

To Intercept or Not to Intercept: Analyzing TLS Interception in Network Appliances. - Louis Waked; Mohammad Mannan; Amr M. Youssef (AsiaCCS, 2018)

On Understanding Permission Usage Contextuality in Android Apps. - Md Zakir Hossen; Mohammad Mannan (DBSec, 2018)

SafeKeeper: Protecting Web Passwords using Trusted Execution Environments. - Klaudia Krawiecka; Arseny Kurnikov; Andrew Paverd; Mohammad Mannan; N. Asokan (WWW, 2018)

Using SafeKeeper to Protect Web Passwords. - Arseny Kurnikov; Klaudia Krawiecka; Andrew Paverd; Mohammad Mannan; N. Asokan (WWW (Companion Volume), 2018)

Smart But Unsafe: Experimental Evaluation of Security and Privacy Practices in Smart Toys. - Sharon Shasha; Moustafa Mahmoud; Mohammad Mannan; Amr M. Youssef (CoRR, 2018)

AppVeto: mobile application self-defense through resource access veto. - Tousif Osman; Mohammad Mannan; Urs Hengartner; Amr M. Youssef (ACSAC, 2019)

DeviceVeil: Robust Authentication for Individual USB Devices Using Physical Unclonable Functions. - Kuniyasu Suzaki; Yohei Hori; Kazukuni Kobara; Mohammad Mannan (DSN, 2019)

On Privacy Risks of Public WiFi Captive Portals. - Suzan Ali; Tousif Osman; Mohammad Mannan; Amr M. Youssef (DPM/CBT@ESORICS, 2019)

One-Time Programs Made Practical. - Lianying Zhao; Joseph I. Choi; Didem Demirag; Kevin R. B. Butler; Mohammad Mannan; Erman Ayday; Jeremy Clark (Financial Cryptography, 2019)

TEE-aided Write Protection Against Privileged Data Tampering. - Lianying Zhao; Mohammad Mannan (NDSS, 2019)

On the null relationship between personality types and passwords. - Amit Maraj; Miguel Vargas Martin; Matthew Shane; Mohammad Mannan (PST, 2019)

Another look at TLS ecosystems in networked devices vs. Web servers. - Nayanamana Samarasinghe; Mohammad Mannan (Comput. Secur., 2019)

Towards a global perspective on web tracking. - Nayanamana Samarasinghe; Mohammad Mannan (Comput. Secur., 2019)

Privacy and Security Risks of "Not-a-Virus" Bundled Adware: The Wajam Case. - Xavier de Carné de Carnavalet; Mohammad Mannan (CoRR, 2019)

Playing With Danger: A Taxonomy and Evaluation of Threats to Smart Toys. - Sharon Shasha; Moustafa Mahmoud; Mohammad Mannan; Amr M. Youssef (IEEE Internet Things J., 2019)

Betrayed by the Guardian: Security and Privacy Risks of Parental Control Solutions. - Suzan Ali; Mounir Elgharabawy; Quentin Duchaussoy; Mohammad Mannan; Amr M. Youssef (ACSAC, 2020)

Reboot-Oriented IoT: Life Cycle Management in Trusted Execution Environment for Disposable IoT devices. - Kuniyasu Suzaki; Akira Tsukamoto; Andy Green; Mohammad Mannan (ACSAC, 2020)

ByPass: Reconsidering the Usability of Password Managers. - Elizabeth Stobert; Tina Safaie; Heather Molyneaux; Mohammad Mannan; Amr M. Youssef (SecureComm (1), 2020)

Chaperone: Real-time Locking and Loss Prevention for Smartphones. - Jiayi Chen; Urs Hengartner; Hassan Khan; Mohammad Mannan (USENIX Security Symposium, 2020)

Securing Applications against Side-channel Attacks through Resource Access Veto. - Tousif Osman; Mohammad Mannan; Urs Hengartner; Amr M. Youssef (DTRAP, 2020)

The Sorry State of TLS Security in Enterprise Interception Appliances. - Louis Waked; Mohammad Mannan; Amr M. Youssef (DTRAP, 2020)

LURK: Server-Controlled TLS Delegation. - Ioana Boureanu; Daniel Migault; Stere Preda; Hyame Assem Alamedine; Sanjay Mishra; Frederic Fieau; Mohammad Mannan (IACR Cryptol. ePrint Arch., 2020)

Confronting the Limitations of Hardware-Assisted Security. - Mohammad Mannan; N. Asokan (IEEE Secur. Priv., 2020)

Red-Black Coins: Dai Without Liquidations. - Mehdi Salehi; Jeremy Clark; Mohammad Mannan (Financial Cryptography Workshops, 2021)

Horus: A Security Assessment Framework for Android Crypto Wallets. - Md Shahab Uddin; Mohammad Mannan; Amr M. Youssef (SecureComm (2), 2021)

On cloaking behaviors of malicious websites. - Nayanamana Samarasinghe; Mohammad Mannan (Comput. Secur., 2021)

On Securing Cloud-hosted Cyber-physical Systems Using Trusted Execution Environments. - Amir Mohammad Naseri; Walter Lucia; Mohammad Mannan; Amr M. Youssef (CoRR, 2021)

Parental Controls: Safer Internet Solutions or New Pitfalls? - Suzan Ali; Mounir Elgharabawy; Quentin Duchaussoy; Mohammad Mannan; Amr M. Youssef (IEEE Secur. Priv., 2021)

Perspectives on the SolarWinds Incident. - Sean Peisert; Bruce Schneier; Hamed Okhravi; Fabio Massacci; Terry Benzel; Carl E. Landwehr; Mohammad Mannan; Jelena Mirkovic; Atul Prakash 001; James Bret Michael (IEEE Secur. Priv., 2021)

On Measuring Vulnerable JavaScript Functions in the Wild. - Maryna Kluban; Mohammad Mannan; Amr M. Youssef (AsiaCCS, 2022)

Hidden in Plain Sight: Exploring Encrypted Channels in Android Apps. - Sajjad Pourali; Nayanamana Samarasinghe; Mohammad Mannan (CCS, 2022)

Leaky Kits: The Increased Risk of Data Exposure from Phishing Kits. - Bhaskar Tejaswi; Nayanamana Samarasinghe; Sajjad Pourali; Mohammad Mannan; Amr M. Youssef (eCrime, 2022)

No Salvation from Trackers: Privacy Analysis of Religious Websites and Mobile Apps. - Nayanamana Samarasinghe; Pranay Kapoor; Mohammad Mannan; Amr M. Youssef (DPM/CBT@ESORICS, 2022)

SAUSAGE: Security Analysis of Unix domain Socket usAGE in Android. - Mounir Elgharabawy; Blas Kojusner; Mohammad Mannan; Kevin R. B. Butler; Byron Williams; Amr M. Youssef (EuroS&P, 2022)

Got Sick and Tracked: Privacy Analysis of Hospital Websites. - Xiufen Yu; Nayanamana Samarasinghe; Mohammad Mannan; Amr M. Youssef (EuroS&P Workshops, 2022)

Not so Immutable: Upgradeability of Smart Contracts on Ethereum. - Mehdi Salehi; Jeremy Clark; Mohammad Mannan (Financial Cryptography Workshops, 2022)

Silver Surfers on the Tech Wave: Privacy Analysis of Android Apps for the Elderly. - Pranay Kapoor; Rohan Pagey; Mohammad Mannan; Amr M. Youssef (SecureComm, 2022)

Et tu, Brute? Privacy Analysis of Government Websites and Mobile Apps. - Nayanamana Samarasinghe; Aashish Adhikari; Mohammad Mannan; Amr M. Youssef (WWW, 2022)

Blindfold: Keeping private keys in PKIs and CDNs out of sight. - Hisham S. Galal; Mohammad Mannan; Amr M. Youssef (Comput. Secur., 2022)

"Free" as in Freedom to Protest? - Fabio Massacci; Antonino Sabetta; Jelena Mirkovic; Toby Murray; Hamed Okhravi; Mohammad Mannan; Anderson Rocha 001; Eric Bodden; Daniel E. Geer (IEEE Secur. Priv., 2022)

All Your IoT Devices Are Belong to Us: Security Weaknesses in IoT Management Platforms. - Bhaskar Tejaswi; Mohammad Mannan; Amr M. Youssef (CODASPY, 2023)

Try On, Spied On?: Privacy Analysis of Virtual Try-On Websites and Android Apps. - Abdelrahman Ragab; Mohammad Mannan; Amr M. Youssef (ESORICS Workshops (1), 2023)

No Place to Hide: Privacy Exposure in Anti-stalkerware Apps and Support Websites. - Philippe Mangeard; Xiufen Yu; Mohammad Mannan; Amr M. Youssef (NordSec, 2023)

Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case. - Supraja Baskaran; Lianying Zhao; Mohammad Mannan; Amr M. Youssef (RAID, 2023)

"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software. - Jonah Stegman; Patrick J. Trottier; Caroline Hillier; Hassan Khan; Mohammad Mannan (USENIX Security Symposium, 2023)

All Your Shops Are Belong to Us: Security Weaknesses in E-commerce Platforms. - Rohan Pagey; Mohammad Mannan; Amr M. Youssef (WWW, 2023)

APTHunter: Detecting Advanced Persistent Threats in Early Stages. - Moustafa Mahmoud; Mohammad Mannan; Amr M. Youssef (DTRAP, 2023)

CDNs' Dark Side: Security Problems in CDN-to-Origin Connections. - Behnam Shobiri; Mohammad Mannan; Amr M. Youssef (DTRAP, 2023)

Poster: Detecting Ransomware Attacks by Analyzing Replicated Block Snapshots Using Neural Networks. - Seok Min Hong; Beom Heyn Kim; Mohammad Mannan (CCS, 2024)

"Trust Me Over My Privacy Policy": Privacy Discrepancies in Romantic AI Chatbot Apps. - Abdelrahman Ragab; Mohammad Mannan; Amr M. Youssef (EuroS&P Workshops, 2024)

Racing for TLS Certificate Validation: A Hijacker's Guide to the Android TLS Galaxy. - Sajjad Pourali; Xiufen Yu; Lianying Zhao; Mohammad Mannan; Amr M. Youssef (USENIX Security Symposium, 2024)

WARNE: A stalkerware evidence collection tool. - Philippe Mangeard; Bhaskar Tejaswi; Mohammad Mannan; Amr M. Youssef (Forensic Sci. Int. Digit. Investig., 2024)

On Detecting and Measuring Exploitable JavaScript Functions in Real-world Applications. - Maryna Kluban; Mohammad Mannan; Amr M. Youssef (ACM Trans. Priv. Secur., 2024)

LURK-T: Limited Use of Remote Keys With Added Trust in TLS 1.3. - Behnam Shobiri; Sajjad Pourali; Daniel Migault; Ioana Boureanu; Stere Preda; Mohammad Mannan; Amr M. Youssef (IEEE Trans. Netw. Sci. Eng., 2024)

Security Weaknesses in IoT Management Platforms. - Bhaskar Tejaswi; Mohammad Mannan; Amr M. Youssef (IEEE Internet Things J., 2024)