Using Path Profiles to Predict HTTP Requests. - Stuart E. Schechter; Murali Krishnan; Michael D. Smith 001 (Comput. Networks, 1998)

Anonymous Authentication of Membership in Dynamic Groups. - Stuart E. Schechter; Todd Parnell; Alexander J. Hartemink (Financial Cryptography, 1999)

How to Buy Better Testing. - Stuart E. Schechter (InfraSec, 2002)

How Much Security Is Enough to Stop a Thief?: The Economics of Outsider Theft via Computer Systems and Networks. - Stuart E. Schechter; Michael D. Smith 001 (Financial Cryptography, 2003)

Access for sale: a new class of worm. - Stuart E. Schechter; Michael D. Smith 001 (WORM, 2003)

Fast Detection of Scanning Worm Infections. - Stuart E. Schechter; Jaeyeon Jung; Arthur W. Berger (RAID, 2004)

Trusted Computing, Peer-to-Peer Distribution, and The Economics of Pirated Entertainment. - Stuart E. Schechter; Rachel Greenstadt; Michael D. Smith 001 (Economics of Information Security, 2004)

Toward Econometric Models of the Security Risk from Remote Attack. - Stuart E. Schechter (IEEE Secur. Priv., 2005)

Inoculating SSH Against Address Harvesting. - Stuart E. Schechter; Jaeyeon Jung; Will Stockwell; Cynthia D. McLain (NDSS, 2006)

Milk or Wine: Does Software Security Improve with Age? - Andy Ozment; Stuart E. Schechter (USENIX Security Symposium, 2006)

Bootstrapping the Adoption of Internet Security Protocols. - Andy Ozment; Stuart E. Schechter (WEIS, 2006)

The Security of OpenBSD: Milk or Wine? - Andy Ozment; Stuart E. Schechter (login Usenix Mag., 2006)

The Emperor's New Security Indicators. - Stuart E. Schechter; Rachna Dhamija; Andy Ozment; Ian Fischer (S&P, 2007)

Can I borrow your phone?: understanding concerns when sharing mobile phones. - Amy K. Karlson; A. J. Bernheim Brush; Stuart E. Schechter (CHI, 2009)

Laissez-faire file sharing: access control designed for individuals at the endpoints. - Maritza L. Johnson; Steven M. Bellovin; Robert W. Reeder; Stuart E. Schechter (NSPW, 2009)

It's not what you know, but who you know: a social approach to last-resort authentication. - Stuart E. Schechter; Serge Egelman; Robert W. Reeder (SOUPS, 2009)

1 + 1 = you: measuring the comprehensibility of metaphors for configuring backup authentication. - Stuart E. Schechter; Robert W. Reeder (SOUPS, 2009)

It's No Secret. Measuring the Security and Reliability of Authentication via "Secret" Questions. - Stuart E. Schechter; A. J. Bernheim Brush; Serge Egelman (SP, 2009)

Use ECP, not ECC, for hard failures in resistive memories. - Stuart E. Schechter; Gabriel H. Loh; Karin Strauss; Doug Burger (ISCA, 2010)

Security That Is Meant to Be Skin Deep: Using Ultraviolet Micropigmentation to Store Emergency-Access Keys for Implantable Medical Devices. - Stuart E. Schechter (HealthSec, 2010)

Popularity Is Everything: A New Approach to Protecting Passwords from Statistical-Guessing Attacks. - Stuart E. Schechter; Cormac Herley; Michael Mitzenmacher (HotSec, 2010)

Self Hosting vs. Cloud Hosting: Accounting for the Security Impact of Hosting in the Cloud. - David Molnar; Stuart E. Schechter (WEIS, 2010)

These aren't the droids you're looking for: retrofitting android to protect data from imperious applications. - Peter Hornyack; Seungyeop Han; Jaeyeon Jung; Stuart E. Schechter; David Wetherall (CCS, 2011)

Privacy Revelations for Web and Mobile Apps. - David Wetherall; David R. Choffnes; Ben Greenstein; Seungyeop Han; Peter Hornyack; Jaeyeon Jung; Stuart E. Schechter; Xiao Sophia Wang (HotOS, 2011)

When the Password Doesn't Work: Secondary Authentication for Websites. - Robert W. Reeder; Stuart E. Schechter (IEEE Secur. Priv., 2011)

Operating system framed in case of mistaken identity: measuring the success of web-based spoofing attacks on OS password-entry dialogs. - Cristian Bravo-Lillo; Lorrie Faith Cranor; Julie S. Downs; Saranga Komanduri; Stuart E. Schechter; Manya Sleeper (CCS, 2012)

It's Not Stealing If You Need It: A Panel on the Ethics of Performing Research Using Public Data of Illicit Origin. - Serge Egelman; Joseph Bonneau; Sonia Chiasson; David Dittrich; Stuart E. Schechter (Financial Cryptography Workshops, 2012)

Goldilocks and the two mobile devices: going beyond all-or-nothing access to a device's applications. - Eiji Hayashi; Oriana Riva; Karin Strauss; A. J. Bernheim Brush; Stuart E. Schechter (SOUPS, 2012)

The Importance of Being Earnest [In Security Warnings]. - Serge Egelman; Stuart E. Schechter (Financial Cryptography, 2013)

Your attention please: designing security-decision UIs to make genuine risks harder to ignore. - Cristian Bravo-Lillo; Saranga Komanduri; Lorrie Faith Cranor; Robert W. Reeder; Manya Sleeper; Julie S. Downs; Stuart E. Schechter (SOUPS, 2013)

Intruders versus intrusiveness: teens' and parents' perspectives on home-entryway surveillance. - Blase Ur; Jaeyeon Jung; Stuart E. Schechter (UbiComp, 2014)

Harder to Ignore? Revisiting Pop-Up Fatigue and Approaches to Prevent It. - Cristian Bravo-Lillo; Lorrie Faith Cranor; Saranga Komanduri; Stuart E. Schechter; Manya Sleeper (SOUPS, 2014)

Towards Reliable Storage of 56-bit Secrets in Human Memory. - Joseph Bonneau; Stuart E. Schechter (USENIX Security Symposium, 2014)

Telepathwords: Preventing Weak Passwords by Reading Users' Minds. - Saranga Komanduri; Richard Shay; Lorrie Faith Cranor; Cormac Herley; Stuart E. Schechter (USENIX Security Symposium, 2014)

Learning Assigned Secrets for Unlocking Mobile Devices. - Stuart E. Schechter; Joseph Bonneau (SOUPS, 2015)

Balloon Hashing: A Memory-Hard Function Providing Provable Protection Against Sequential Attacks. - Dan Boneh; Henry Corrigan-Gibbs; Stuart E. Schechter (ASIACRYPT (1), 2016)

Balloon Hashing: Provably Space-Hard Hash Functions with Data-Independent Access Patterns. - Henry Corrigan-Gibbs; Dan Boneh; Stuart E. Schechter (IACR Cryptol. ePrint Arch., 2016)

StopGuessing: Using Guessed Passwords to Thwart Online Guessing. - Stuart E. Schechter; Yuan Tian 001; Cormac Herley (EuroS&P, 2019)

Distinguishing Attacks from Legitimate Authentication Traffic at Scale. - Cormac Herley; Stuart E. Schechter (NDSS, 2019)

StopGuessing: Using Guessed Passwords to Thwart Online Password Guessing. - Yuan Tian 001; Cormac Herley; Stuart E. Schechter (IEEE Secur. Priv., 2020)