Suing Spammers for Fun and Profit. - Serge Egelman (login Usenix Mag., 2004)

An analysis of P3P-enabled web sites among top-20 search results. - Serge Egelman; Lorrie Faith Cranor; Abdur Chowdhury (ICEC, 2006)

Power strips, prophylactics, and privacy, oh my! - Julia Gideon; Lorrie Faith Cranor; Serge Egelman; Alessandro Acquisti (SOUPS, 2006)

Soups 2006. - Janice Y. Tsai; Serge Egelman (IEEE Secur. Priv., 2006)

Security user studies: methodologies and best practices. - Serge Egelman; Jennifer King; Robert C. Miller; Nick Ragouzis; Erika Shehan (CHI Extended Abstracts, 2007)

Phinding Phish: An Evaluation of Anti-Phishing Toolbars. - Lorrie Faith Cranor; Serge Egelman; Jason I. Hong; Yue Zhang 002 (NDSS, 2007)

You've been warned: an empirical study of the effectiveness of web browser phishing warnings. - Serge Egelman; Lorrie Faith Cranor; Jason I. Hong (CHI, 2008)

Family accounts: a new paradigm for user accounts within the home environment. - Serge Egelman; A. J. Bernheim Brush; Kori M. Inkpen (CSCW, 2008)

P3P deployment on websites. - Lorrie Faith Cranor; Serge Egelman; Steve Sheng; Aleecia M. McDonald; Abdur Chowdhury (Electron. Commer. Res. Appl., 2008)

Timing is everything?: the effects of timing and placement of online privacy indicators. - Serge Egelman; Janice Y. Tsai; Lorrie Faith Cranor; Alessandro Acquisti (CHI, 2009)

It's not what you know, but who you know: a social approach to last-resort authentication. - Stuart E. Schechter; Serge Egelman; Robert W. Reeder (SOUPS, 2009)

The impact of privacy indicators on search engine browsing patterns. - Janice Y. Tsai; Serge Egelman; Lorrie Faith Cranor; Alessandro Acquisti (SOUPS, 2009)

It's No Secret. Measuring the Security and Reliability of Authentication via "Secret" Questions. - Stuart E. Schechter; A. J. Bernheim Brush; Serge Egelman (SP, 2009)

Crying Wolf: An Empirical Study of SSL Warning Effectiveness. - Joshua Sunshine; Serge Egelman; Hazim Almuhimedi; Neha Atri; Lorrie Faith Cranor (USENIX Security Symposium, 2009)

This is your data on drugs: lessons computer security can learn from the drug war. - David Molnar; Serge Egelman; Nicolas Christin (NSPW, 2010)

Please Continue to Hold: An Empirical Study on User Tolerance of Security Delays. - Serge Egelman; David Molnar; Nicolas Christin; Alessandro Acquisti; Cormac Herley; Shriram Krishnamurthi (WEIS, 2010)

Oops, I did it again: mitigating repeated access control errors on facebook. - Serge Egelman; Andrew Oates; Shriram Krishnamurthi (CHI, 2011)

Of passwords and people: measuring the effect of password-composition policies. - Saranga Komanduri; Richard Shay; Patrick Gage Kelley; Michelle L. Mazurek; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Serge Egelman (CHI, 2011)

It's All about the Benjamins: An Empirical Study on Incentivizing Users to Ignore Security Advice. - Nicolas Christin; Serge Egelman; Timothy Vidas; Jens Grossklags (Financial Cryptography, 2011)

The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study. - Janice Y. Tsai; Serge Egelman; Lorrie Faith Cranor; Alessandro Acquisti (Inf. Syst. Res., 2011)

I've got 99 problems, but vibration ain't one: a survey of smartphone users' concerns. - Adrienne Porter Felt; Serge Egelman; David A. Wagner 001 (SPSM@CCS, 2012)

It's Not Stealing If You Need It: A Panel on the Ethics of Performing Research Using Public Data of Illicit Origin. - Serge Egelman; Joseph Bonneau; Sonia Chiasson; David Dittrich; Stuart E. Schechter (Financial Cryptography Workshops, 2012)

Android permissions: user attention, comprehension, and behavior. - Adrienne Porter Felt; Elizabeth Ha; Serge Egelman; Ariel Haney; Erika Chin; David A. Wagner 001 (SOUPS, 2012)

Facebook and privacy: it's complicated. - Maritza L. Johnson; Serge Egelman; Steven M. Bellovin (SOUPS, 2012)

How to Ask for Permission. - Adrienne Porter Felt; Serge Egelman; Matthew Finifter; Devdatta Akhawe; David A. Wagner 001 (HotSec, 2012)

Choice Architecture and Smartphone Privacy: There's a Price for That. - Serge Egelman; Adrienne Porter Felt; David A. Wagner 001 (WEIS, 2012)

Helping Users Create Better Passwords. - Blase Ur; Patrick Gage Kelley; Saranga Komanduri; Joel Lee; Michael Maass; Michelle L. Mazurek; Timothy Passaro; Richard Shay; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; et al. (login Usenix Mag., 2012)

Choice Architecture and Smartphone Privacy: There's a Price for That. - Serge Egelman; Adrienne Porter Felt; David A. Wagner 001 (The Economics of Information Security and Privacy, 2013)

My profile is my password, verify me!: the privacy/convenience tradeoff of facebook connect. - Serge Egelman (CHI, 2013)

Does my password go up to eleven?: the impact of password meters on password selection. - Serge Egelman; Andreas Sotirakopoulos; Ildar Muslukhov; Konstantin Beznosov; Cormac Herley (CHI, 2013)

The Importance of Being Earnest [In Security Warnings]. - Serge Egelman; Stuart E. Schechter (Financial Cryptography, 2013)

U-PriSM 2: the second usable privacy and security for mobile devices workshop. - Sonia Chiasson; Heather Crawford; Serge Egelman; Pourang Irani (Mobile HCI, 2013)

Markets for zero-day exploits: ethics and implications. - Serge Egelman; Cormac Herley; Paul C. van Oorschot (NSPW, 2013)

When it's better to ask forgiveness than get permission: attribution mechanisms for smartphone resources. - Christopher Thompson 002; Maritza L. Johnson; Serge Egelman; David A. Wagner 001; Jennifer King (SOUPS, 2013)

Crowdsourcing in HCI Research. - Serge Egelman; Ed H. Chi; Steven Dow (Ways of Knowing in HCI, 2014)

Are You Ready to Lock? - Serge Egelman; Sakshi Jain; Rebecca S. Portnoff; Kerwell Liao; Sunny Consolvo; David A. Wagner 001 (CCS, 2014)

The effect of developer-specified explanations for permission requests on smartphone user behavior. - Joshua Tan 002; Khanh Nguyen; Michael Theodorides; Heidi Negrón-Arroyo; Christopher Thompson 002; Serge Egelman; David A. Wagner 001 (CHI, 2014)

Reflections on U-PriSM 2: The Second Workshop on Usable Privacy and Security for Mobile Devices. - Sonia Chiasson; Heather Crawford; Serge Egelman; Pourang Irani (Int. J. Mob. Hum. Comput. Interact., 2014)

Is This Thing On?: Crowdsourcing Privacy Indicators for Ubiquitous Sensing Platforms. - Serge Egelman; Raghudeep Kannavara; Richard Chow (CHI, 2015)

Scaling the Security Wall: Developing a Security Behavior Intentions Scale (SeBIS). - Serge Egelman; Eyal Péer (CHI, 2015)

Somebody's Watching Me?: Assessing the Effectiveness of Webcam Indicator Lights. - Rebecca S. Portnoff; Linda Naeun Lee; Serge Egelman; Pratyush Mishra; Derek Leung; David A. Wagner 001 (CHI, 2015)

Fingerprinting Web Users Through Font Metrics. - David Fifield; Serge Egelman (Financial Cryptography, 2015)

HCI in Business: A Collaboration with Academia in IoT Privacy. - Richard Chow; Serge Egelman; Raghudeep Kannavara; Hosub Lee 001; Suyash Misra; Edward Wang (HCI (23), 2015)

The Myth of the Average User: Improving Privacy and Security Systems through Individualization. - Serge Egelman; Eyal Péer (NSPW, 2015)

Teaching Privacy: What Every Student Needs to Know (Abstract Only). - Gerald Friedland; Serge Egelman; Daniel D. Garcia (SIGCSE, 2015)

Android Permissions Remystified: A Field Study on Contextual Integrity. - Primal Wijesekera; Arjun Baokar; Ashkan Hosseini; Serge Egelman; David A. Wagner 001; Konstantin Beznosov (USENIX Security Symposium, 2015)

Risk Perceptions for Wearable Devices. - Linda Naeun Lee; Serge Egelman; Joong Hwa Lee; David A. Wagner 001 (CoRR, 2015)

Teaching Privacy: Multimedia Making a Difference. - Julia Bernd; Blanca Gordo; Jaeyoung Choi 002; Bryan Morgan; Nicholas Henderson; Serge Egelman; Daniel D. Garcia; Gerald Friedland (IEEE Multim., 2015)

Predicting privacy and security attitudes. - Serge Egelman; Eyal Péer (SIGCAS Comput. Soc., 2015)

Behavior Ever Follows Intention?: A Validation of the Security Behavior Intentions Scale (SeBIS). - Serge Egelman; Marian Harbach; Eyal Péer (CHI, 2016)

The Anatomy of Smartphone Unlocking: A Field Study of Android Lock Screens. - Marian Harbach; Alexander De Luca; Serge Egelman (CHI, 2016)

Keep on Lockin' in the Free World: A Multi-National Comparison of Smartphone Locking. - Marian Harbach; Alexander De Luca; Nathan Malkin; Serge Egelman (CHI, 2016)

The Teaching Privacy Curriculum. - Serge Egelman; Julia Bernd; Gerald Friedland; Dan Garcia 001 (SIGCSE, 2016)

Do or Do Not, There Is No Try: User Engagement May Not Improve Security Outcomes. - Alain Forget; Sarah Pearman; Jeremy Thomas; Alessandro Acquisti; Nicolas Christin; Lorrie Faith Cranor; Serge Egelman; Marian Harbach; Rahul Telang (SOUPS, 2016)

Recovering High-Value Secrets with SGX and Social Authentication. - Nathan Malkin; Serge Egelman; David A. Wagner 001 (WAY@SOUPS, 2016)

The Anatomy Of Smartphone Unlocking: Why and How Android Users Around the World Lock their Phones. - Nathan Malkin; Marian Harbach; Alexander De Luca; Serge Egelman (GetMobile Mob. Comput. Commun., 2016)

Let's Go in for a Closer Look: Observing Passwords in Their Natural Habitat. - Sarah Pearman; Jeremy Thomas; Pardis Emami Naeini; Hana Habib; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Serge Egelman; Alain Forget (CCS, 2017)

Turtle Guard: Helping Android Users Apply Contextual Privacy Preferences. - Lynn Tsai; Primal Wijesekera; Joel Reardon; Irwin Reyes; Serge Egelman; David A. Wagner 001; Nathan Good; Jung-Wei Chen (SOUPS, 2017)

The Feasibility of Dynamically Granted Permissions: Aligning Mobile Privacy with User Preferences. - Primal Wijesekera; Arjun Baokar; Lynn Tsai; Joel Reardon; Serge Egelman; David A. Wagner 001; Konstantin Beznosov (IEEE Symposium on Security and Privacy, 2017)

A Usability Evaluation of Tor Launcher. - Linda Naeun Lee; David Fifield; Nathan Malkin; Ganesh Iyer; Serge Egelman; David A. Wagner 001 (Proc. Priv. Enhancing Technol., 2017)

An Experience Sampling Study of User Reactions to Browser Warnings in the Field. - Robert W. Reeder; Adrienne Porter Felt; Sunny Consolvo; Nathan Malkin; Christopher Thompson 002; Serge Egelman (CHI, 2018)

Contextualizing Privacy Decisions for Better Prediction (and Protection). - Primal Wijesekera; Joel Reardon; Irwin Reyes; Lynn Tsai; Jung-Wei Chen; Nathan Good; David A. Wagner 001; Konstantin Beznosov; Serge Egelman (CHI, 2018)

The Accuracy of the Demographic Inferences Shown on Google's Ad Settings. - Michael Carl Tschantz; Serge Egelman; Jaeyoung Choi 002; Nicholas Weaver; Gerald Friedland (WPES@CCS, 2018)

Quantifying Users' Beliefs about Software Updates. - Arunesh Mathur; Nathan Malkin; Marian Harbach; Eyal Péer; Serge Egelman (CoRR, 2018)

Cybercasing 2.0: You Get What You Pay For. - Jaeyoung Choi 002; Istemi Ekin Akkus; Serge Egelman; Gerald Friedland; Robin Sommer; Michael Carl Tschantz; Nicholas Weaver (CoRR, 2018)

Dynamically Regulating Mobile Application Permissions. - Primal Wijesekera; Arjun Baokar; Lynn Tsai; Joel Reardon; Serge Egelman; David A. Wagner 001; Konstantin Beznosov (IEEE Secur. Priv., 2018)

"Won't Somebody Think of the Children?" Examining COPPA Compliance at Scale. - Irwin Reyes; Primal Wijesekera; Joel Reardon; Amit Elazari Bar On; Abbas Razaghpanah; Narseo Vallina-Rodriguez; Serge Egelman (Proc. Priv. Enhancing Technol., 2018)

A Promise Is A Promise: The Effect of Commitment Devices on Computer Security Intentions. - Alisa Frik; Nathan Malkin; Marian Harbach; Eyal Péer; Serge Egelman (CHI, 2019)

Privacy controls for always-listening devices. - Nathan Malkin; Serge Egelman; David A. Wagner 001 (NSPW, 2019)

Information Design in An Aged Care Context: Views of Older Adults on Information Sharing in a Care Triad. - Leysan Nurgalieva; Alisa Frik; Francesco Ceschel; Serge Egelman; Maurizio Marchese (PervasiveHealth, 2019)

Privacy and Security Threat Models and Mitigation Strategies of Older Adults. - Alisa Frik; Leysan Nurgalieva; Julia Bernd; Joyce Lee; Florian Schaub; Serge Egelman (SOUPS @ USENIX Security Symposium, 2019)

Investigating Users' Preferences and Expectations for Always-Listening Voice Assistants. - Madiha Tabassum; Tomasz Kosinski; Alisa Frik; Nathan Malkin; Primal Wijesekera; Serge Egelman; Heather Richter Lipford (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2019)

Privacy Attitudes of Smart Speaker Users. - Nathan Malkin; Joe Deatrick; Allen Tong; Primal Wijesekera; Serge Egelman; David A. Wagner 001 (Proc. Priv. Enhancing Technol., 2019)

50 Ways to Leak Your Data: An Exploration of Apps' Circumvention of the Android Permissions System. - Joel Reardon; Álvaro Feal; Primal Wijesekera; Amit Elazari Bar On; Narseo Vallina-Rodriguez; Serge Egelman (login Usenix Mag., 2019)

Decentralized backup and recovery of TOTP secrets. - Conor Gilsenan; Noura Alomar; Andrew Huang; Serge Egelman (HotSoS, 2020)

"You've Got Your Nice List of Bugs, Now What?" Vulnerability Discovery and Management Processes in the Wild. - Noura Alomar; Primal Wijesekera; Edward Qiu; Serge Egelman (SOUPS @ USENIX Security Symposium, 2020)

Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck. - Benjamin Andow; Samin Yaseer Mahmud; Justin Whitaker; William Enck; Bradley Reaves; Kapil Singh; Serge Egelman (USENIX Security Symposium, 2020)

Empirical Measurement of Systemic 2FA Usability. - Joshua Reynolds; Nikita Samarin; Joseph D. Barnes; Taylor Judd; Joshua Mason; Michael D. Bailey; Serge Egelman (USENIX Security Symposium, 2020)

Nudge me right: Personalizing online security nudges to people's decision-making styles. - Eyal Péer; Serge Egelman; Marian Harbach; Nathan Malkin; Arunesh Mathur; Alisa Frik (Comput. Hum. Behav., 2020)

Conducting Privacy-Sensitive Surveys: A Case Study of Civil Society Organizations. - Nikita Samarin; Alisa Frik; Sean Brooks; Coye Cheshire; Serge Egelman (CoRR, 2020)

Disaster privacy/privacy disaster. - Madelyn R. Sanfilippo; Yan Shvartzshnaider; Irwin Reyes; Helen Nissenbaum; Serge Egelman (J. Assoc. Inf. Sci. Technol., 2020)

The Price is (Not) Right: Comparing Privacy in Free and Paid Apps. - Catherine Han; Irwin Reyes; Álvaro Feal; Joel Reardon; Primal Wijesekera; Narseo Vallina-Rodriguez; Amit Elazari Bar On; Kenneth A. Bamberger; Serge Egelman (Proc. Priv. Enhancing Technol., 2020)

Challenges in inferring privacy properties of smart devices: towards scalable multi-vantage point testing methods. - Aniketh Girish; Vijay Prakash; Serge Egelman; Joel Reardon; Juan Tapiador; Danny Yuxing Huang; Srdjan Matic; Narseo Vallina-Rodriguez (StudentWorkshop@CoNEXT, 2022)

Runtime Permissions for Privacy in Proactive Intelligent Assistants. - Nathan Malkin; David A. Wagner 001; Serge Egelman (SOUPS @ USENIX Security Symposium, 2022)

Can Humans Detect Malicious Always-Listening Assistants? A Framework for Crowdsourcing Test Drives. - Nathan Malkin; David A. Wagner 001; Serge Egelman (Proc. ACM Hum. Comput. Interact., 2022)

Developers Say the Darnedest Things: Privacy Compliance Processes Followed by Developers of Child-Directed Apps. - Noura Alomar; Serge Egelman (Proc. Priv. Enhancing Technol., 2022)

In the Room Where It Happens: Characterizing Local Communication and Threats in Smart Homes. - Aniketh Girish; Tianrui Hu; Vijay Prakash; Daniel J. Dubois; Srdjan Matic; Danny Yuxing Huang; Serge Egelman; Joel Reardon; Juan Tapiador; David R. Choffnes; Narseo Vallina-Rodriguez (IMC, 2023)

Security and Privacy Failures in Popular 2FA Apps. - Conor Gilsenan; Fuzail Shakir; Noura Alomar; Serge Egelman (USENIX Security Symposium, 2023)

Log: It's Big, It's Heavy, It's Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem. - Allan Lyons; Julien Gamba; Austin Shawaga; Joel Reardon; Juan Tapiador; Serge Egelman; Narseo Vallina-Rodriguez (USENIX Security Symposium, 2023)

A Model of Contextual Factors Affecting Older Adults' Information-Sharing Decisions in the U.S. - Alisa Frik; Julia Bernd; Serge Egelman (ACM Trans. Comput. Hum. Interact., 2023)

Lessons in VCR Repair: Compliance of Android App Developers with the California Consumer Privacy Act (CCPA). - Nikita Samarin; Shayna Kothari; Zaina Siyed; Oscar Bjorkman; Reena Yuan; Primal Wijesekera; Noura Alomar; Jordan Fischer; Chris Jay Hoofnagle; Serge Egelman (Proc. Priv. Enhancing Technol., 2023)

R+R: Matrioska: A User-Centric Defense Against Virtualization-Based Repackaging Malware on Android. - Simone Zerbini; Samuele Doria; Primal Wijesekera; Serge Egelman; Eleonora Losiouk (ACSAC, 2024)

The Medium is the Message: How Secure Messaging Apps Leak Sensitive Data to Push Notification Services. - Nikita Samarin; Alex Sanchez; Trinity Chung; Akshay Dan Bhavish Juleemun; Conor Gilsenan; Nick Merrill; Joel Reardon; Serge Egelman (CoRR, 2024)

EU Cyber Resilience Act: Socio-Technical and Research Challenges (Dagstuhl Seminar 24112). - Mila Dalla Preda; Serge Egelman; Anna Maria Mandalari; Volker Stocker; Juan Tapiador; Narseo Vallina-Rodriguez (Dagstuhl Reports, 2024)

"Protect Me Tomorrow": Commitment Nudges to Remedy Compromised Passwords. - Eyal Péer; Alisa Frik; Conor Gilsenan; Serge Egelman (ACM Trans. Comput. Hum. Interact., 2024)

The Effect of Platform Policies on App Privacy Compliance: A Study of Child-Directed Apps. - Noura Alomar; Joel Reardon; Aniketh Girish; Narseo Vallina-Rodriguez; Serge Egelman (Proc. Priv. Enhancing Technol., 2025)