Password policy simulation and analysis. - Richard Shay; Abhilasha Bhargav-Spantzel; Elisa Bertino (Digital Identity Management, 2007)

A comprehensive simulation tool for the analysis of password policies. - Richard Shay; Elisa Bertino (Int. J. Inf. Sec., 2009)

Access control for home data sharing: evaluating social acceptability. - Michelle L. Mazurek; J. P. Arsenault; Joanna Bresee; Nitin Gupta 001; Iulia Ion; Christina Johns; Daniel Lee; Yuan Liang; Jenny Olsen; Brandon Salmon; Richard Shay; Kami Vaniea; et al. (CHI, 2010)

Exploring reactive access control. - Richard Shay; Michelle L. Mazurek; Peter F. Klemperer; Hassan Takabi (CHI Extended Abstracts, 2010)

Encountering stronger password requirements: user attitudes and behaviors. - Richard Shay; Saranga Komanduri; Patrick Gage Kelley; Pedro Giovanni Leon; Michelle L. Mazurek; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (SOUPS, 2010)

Of passwords and people: measuring the effect of password-composition policies. - Saranga Komanduri; Richard Shay; Patrick Gage Kelley; Michelle L. Mazurek; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Serge Egelman (CHI, 2011)

Exploring reactive access control. - Michelle L. Mazurek; Peter F. Klemperer; Richard Shay; Hassan Takabi; Lujo Bauer; Lorrie Faith Cranor (CHI, 2011)

Why Johnny can't opt out: a usability evaluation of tools to limit online behavioral advertising. - Pedro Giovanni Leon; Blase Ur; Richard Shay; Yang Wang 005; Rebecca Balebako; Lorrie Faith Cranor (CHI, 2012)

Correct horse battery staple: exploring the usability of system-assigned passphrases. - Richard Shay; Patrick Gage Kelley; Saranga Komanduri; Michelle L. Mazurek; Blase Ur; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (SOUPS, 2012)

Smart, useful, scary, creepy: perceptions of online behavioral advertising. - Blase Ur; Pedro Giovanni Leon; Lorrie Faith Cranor; Richard Shay; Yang Wang 005 (SOUPS, 2012)

Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms. - Patrick Gage Kelley; Saranga Komanduri; Michelle L. Mazurek; Richard Shay; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Julio C. López 001 (IEEE Symposium on Security and Privacy, 2012)

How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation. - Blase Ur; Patrick Gage Kelley; Saranga Komanduri; Joel Lee; Michael Maass; Michelle L. Mazurek; Timothy Passaro; Richard Shay; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (USENIX Security Symposium, 2012)

Helping Users Create Better Passwords. - Blase Ur; Patrick Gage Kelley; Saranga Komanduri; Joel Lee; Michael Maass; Michelle L. Mazurek; Timothy Passaro; Richard Shay; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; et al. (login Usenix Mag., 2012)

Measuring password guessability for an entire university. - Michelle L. Mazurek; Saranga Komanduri; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Patrick Gage Kelley; Richard Shay; Blase Ur (CCS, 2013)

The Impact of Length and Mathematical Operators on the Usability and Security of System-Assigned One-Time PINs. - Patrick Gage Kelley; Saranga Komanduri; Michelle L. Mazurek; Richard Shay; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (Financial Cryptography Workshops, 2013)

What matters to users?: factors that affect users' willingness to share information with online advertisers. - Pedro Giovanni Leon; Blase Ur; Yang Wang 005; Manya Sleeper; Rebecca Balebako; Richard Shay; Lujo Bauer; Mihai Christodorescu; Lorrie Faith Cranor (SOUPS, 2013)

"My religious aunt asked why i was trying to sell her viagra": experiences with account hijacking. - Richard Shay; Iulia Ion; Robert W. Reeder; Sunny Consolvo (CHI, 2014)

Can long passwords be secure and usable? - Richard Shay; Saranga Komanduri; Adam L. Durity; Phillip (Seyoung) Huh; Michelle L. Mazurek; Sean M. Segreti; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (CHI, 2014)

Telepathwords: Preventing Weak Passwords by Reading Users' Minds. - Saranga Komanduri; Richard Shay; Lorrie Faith Cranor; Cormac Herley; Stuart E. Schechter (USENIX Security Symposium, 2014)

A Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior. - Richard Shay; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Alain Forget; Saranga Komanduri; Michelle L. Mazurek; William Melicher; Sean M. Segreti; Blase Ur (CHI, 2015)

"I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab. - Blase Ur; Fumiko Noma; Jonathan Bees; Sean M. Segreti; Richard Shay; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (SOUPS, 2015)

Measuring Real-World Accuracies and Biases in Modeling Password Guessability. - Blase Ur; Sean M. Segreti; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Saranga Komanduri; Darya Kurilova; Michelle L. Mazurek; William Melicher; Richard Shay (USENIX Security Symposium, 2015)

Creating Usable Policies for Stronger Passwords with MTurk. - Richard Shay (2015)

Usability and Security of Text Passwords on Mobile Devices. - William Melicher; Darya Kurilova; Sean M. Segreti; Pranshu Kalvani; Richard Shay; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Michelle L. Mazurek (CHI, 2016)

SoK: Privacy on Mobile Devices - It's Complicated. - Chad Spensky; Jeffrey Stewart; Arkady Yerukhimovich; Richard Shay; Ari Trachtenberg; Rick Housley; Robert K. Cunningham (Proc. Priv. Enhancing Technol., 2016)

Designing Password Policies for Strength and Usability. - Richard Shay; Saranga Komanduri; Adam L. Durity; Phillip (Seyoung) Huh; Michelle L. Mazurek; Sean M. Segreti; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (ACM Trans. Inf. Syst. Secur., 2016)

Diversify to Survive: Making Passwords Stronger with Adaptive Policies. - Sean M. Segreti; William Melicher; Saranga Komanduri; Darya Melicher; Richard Shay; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Michelle L. Mazurek (SOUPS, 2017)

SoK: Cryptographically Protected Database Search. - Benjamin Fuller 001; Mayank Varia; Arkady Yerukhimovich; Emily Shen; Ariel Hamlin; Vijay Gadepally; Richard Shay; John Darby Mitchell; Robert K. Cunningham (IEEE Symposium on Security and Privacy, 2017)

Don't Even Ask: Database Access Control through Query Control. - Richard Shay; Uri Blumenthal; Vijay Gadepally; Ariel Hamlin; John Darby Mitchell; Robert K. Cunningham (SIGMOD Rec., 2018)

Lessons Learned From Designing a Security Architecture for Real-World Government Agencies. - Amy Dettmer; Hamed Okhravi; Kevin Perry; Nabil Schear; Richard Shay; Mary Ellen Zurko; Paula J. Donovan (IEEE Secur. Priv., 2021)