| Monday begins at 12:30 |
9:00
Privacy Notices, Permissions & Labels
- How Effective are Privacy Labels at Informing Users About App Data Handling Practices?
- I don't know what I've all granted. Does it really matter? - Understanding Users' Awareness of Different Permission Types on Android
- Nudging Developers Toward Privacy: Evaluating the Impact of Personalized App Review Reports
|
9:00
Usable Security Mechanisms & Emerging Threats
- IdentitySign: Design and User Study of a Prototype Application for Digitally Signing Documents Using an Identity Wallet
- Is It Real? Exploiting Virtual-Physical Discrimination Vulnerability in Mixed Reality
- Clear, Actionable and Confidence-Inspiring Recommendations? Comparative Study of AI-Generated and Human-Written Penetration Testing Reports
|
|
BREAK |
BREAK |
|
11:15
Security Operations & Practitioners
- Like a Hammer, It Can Build, It Can Break: Large Language Model Uses, Perceptions, and Adoption in Cybersecurity Operations on Reddit
- The Impact of Emerging AI Practices on the Cybersecurity Workforce
- From Preventive to Reactive: How AI Coding Assistants Transform Developers' Security Awareness
- I See DNS People: DNS Resolver Security, Through Operator Perspectives and Practices
|
11:15
Scams, Fraud & Misinformation
- "You Have Been Selected as the Winner": Characterizing User-Reported Scams on TikTok
- Source-Level Disengagement: A Usable Security Defense Against Misinformation
- A Penny for Your Prompts: Experiments Detecting and Mitigating LLM Usage by Survey Respondents
- SoK: Mapping Threats to Defenses in Online Survey Fraud
|
12:30
Opening remarks and awards
|
12:30 in-person speed mentoring / lunch
|
12:30 in-person speed mentoring / lunch
(town hall starts at 1:30)
|
13:00
Authentication & Credentials
- An Analysis of the Security, Usability, and Automation Capabilities of Password Update Processes on Top-Ranked Websites
- Passkeys in the Wild: A Systematic Study of FIDO2 User Experience Consistency Across Websites
- How Users Enter Generated Passwords on Non-Desktop Devices
- Not All Is Lost: Partial Recovery & Memorability in Self-Sovereign Digital Identity
|
14:00
Phishing & Social Engineering
- "I didn't know I would be this excited not to be scammed." Exploring Emotional and Behavioral Responses During Phishing Attacks
- Anxious and Aware: Examining the Effects of Social Anxiety on Social Engineering Resilience and Vulnerability
- Quantifying Risk Perception and Scam Response Among International and Domestic US University Students
- Experiences with Digital Scams Post-Incarceration in the U.S.
|
14:00
GenAI Privacy & Risks
- AI've Got a Bad Feeling About This: A Privacy Threat Modeling Framework for GenAI
- Understanding U.S. Users' Security and Privacy Transparency Needs for Consumer-Facing Generative AI
- Maybe... I Don't Really Wanna Clone: Attitudes and Anticipated Harms of (Consensual) After-Death Cloning of One's Own and Voices of Entrusted Others
|
|
|
|
|
14:45
Families & Shared Devices
- SoK: The Design Space of Usable Privacy Interventions for Parents: A Systematization of Knowledge
- "They are not my children to post": Examining Non-Parental Sharenting Practices in In-home Childcare
- Sharing Digital Devices is Normal and Cultural: Privacy and Security Challenges in Collectivist Immigrant Households
- From Thrift Stores to Digital Storefronts: Users' Perspectives on Privacy and Security of Online Second-Hand Shopping in Germany
|
15:45
At-Risk & Vulnerable Users
- Usability Determines Safety for At-Risk Users: Evaluating Hidden Device Detectors for Intimate Partner Surveillance
- Goals, Risks, and Safety Practices in Online Labor Abuse Disclosures
- "I feel as though my privacy is being violated": Privacy Risks and Barriers in Instant Messaging for Blind and Low-Vision Users
- "Don't Let Them Get To You": Understanding the Role of TikTok as a Source of Support for Cyberbullying Victims
- Reproductive Security & Privacy Advice on TikTok after the Overturn of Roe
|
15:45
Security Advice & Education
- Who Can Actually Follow IT-Security Advice? Exploring the Usability of IT-Security Advice
- CyQured: Design, Development, and Empirical Evaluation of a Tabletop Game for Personal Cybersecurity Education
- Nice to Know You're Not Alone: Co-designing Community-centered Online Safety and Privacy Education with Librarians
- Security versus Productivity: A Case Study of Email Management Practices with Job Task Analysis
17:00
Closing + Poster Awards
|
