Mohammad Mannan

Publication Activity (10 Years)

Years Active: 2004-2024
Publications (10 Years): 71

Top Topics

Experimental Evaluation

Execution Environment

Personality Types

Top Venues

Publications

Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
Security Weaknesses in IoT Management Platforms. IEEE Internet Things J. 11 (1) (2024)
Maryna Kluban, Mohammad Mannan, Amr M. Youssef
On Detecting and Measuring Exploitable JavaScript Functions in Real-world Applications. ACM Trans. Priv. Secur. 27 (1) (2024)
Philippe Mangeard, Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
WARNE: A stalkerware evidence collection tool. Forensic Sci. Int. Digit. Investig. 48 (2024)
Sajjad Pourali, Xiufen Yu, Lianying Zhao, Mohammad Mannan, Amr M. Youssef
Racing for TLS Certificate Validation: A Hijacker's Guide to the Android TLS Galaxy. USENIX Security Symposium (2024)
Philippe Mangeard, Xiufen Yu, Mohammad Mannan, Amr M. Youssef
No Place to Hide: Privacy Exposure in Anti-stalkerware Apps and Support Websites. NordSec (2023)
Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
Security Weaknesses in IoT Management Platforms. CoRR (2023)
Supraja Baskaran, Lianying Zhao, Mohammad Mannan, Amr M. Youssef
Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case. CoRR (2023)
Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
All Your IoT Devices Are Belong to Us: Security Weaknesses in IoT Management Platforms. CODASPY (2023)
Supraja Baskaran, Lianying Zhao, Mohammad Mannan, Amr M. Youssef
Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case. RAID (2023)
Rohan Pagey, Mohammad Mannan, Amr M. Youssef
All Your Shops Are Belong to Us: Security Weaknesses in E-commerce Platforms. WWW (2023)
Jonah Stegman, Patrick J. Trottier, Caroline Hillier, Hassan Khan, Mohammad Mannan
"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software. USENIX Security Symposium (2023)
Abdelrahman Ragab, Mohammad Mannan, Amr M. Youssef
Try On, Spied On?: Privacy Analysis of Virtual Try-On Websites and Android Apps. ESORICS Workshops (1) (2023)
Jonah Stegman, Patrick J. Trottier, Caroline Hillier, Hassan Khan, Mohammad Mannan
"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software. CoRR (2022)
Mounir Elgharabawy, Blas Kojusner, Mohammad Mannan, Kevin R. B. Butler, Byron Williams, Amr M. Youssef
SAUSAGE: Security Analysis of Unix domain Socket Usage in Android. CoRR (2022)
Nayanamana Samarasinghe, Pranay Kapoor, Mohammad Mannan, Amr M. Youssef
No Salvation from Trackers: Privacy Analysis of Religious Websites and Mobile Apps. DPM/CBT@ESORICS (2022)
Mehdi Salehi, Jeremy Clark, Mohammad Mannan
Not so immutable: Upgradeability of Smart Contracts on Ethereum. CoRR (2022)
Maryna Kluban, Mohammad Mannan, Amr M. Youssef
On Measuring Vulnerable JavaScript Functions in the Wild. AsiaCCS (2022)
Sajjad Pourali, Nayanamana Samarasinghe, Mohammad Mannan
Hidden in Plain Sight: Exploring Encrypted Channels in Android apps. CoRR (2022)
Fabio Massacci, Antonino Sabetta, Jelena Mirkovic, Toby Murray, Hamed Okhravi, Mohammad Mannan, Anderson Rocha, Eric Bodden, Daniel E. Geer
"Free" as in Freedom to Protest? IEEE Secur. Priv. 20 (5) (2022)
Mehdi Salehi, Jeremy Clark, Mohammad Mannan
Not so Immutable: Upgradeability of Smart Contracts on Ethereum. Financial Cryptography Workshops (2022)
Hisham S. Galal, Mohammad Mannan, Amr M. Youssef
Blindfold: Keeping Private Keys in PKIs and CDNs out of Sight. CoRR (2022)
Mounir Elgharabawy, Blas Kojusner, Mohammad Mannan, Kevin R. B. Butler, Byron Williams, Amr M. Youssef
SAUSAGE: Security Analysis of Unix domain Socket usAGE in Android. EuroS&P (2022)
Pranay Kapoor, Rohan Pagey, Mohammad Mannan, Amr M. Youssef
Silver Surfers on the Tech Wave: Privacy Analysis of Android Apps for the Elderly. SecureComm (2022)
Hisham S. Galal, Mohammad Mannan, Amr M. Youssef
Blindfold: Keeping private keys in PKIs and CDNs out of sight. Comput. Secur. 118 (2022)
Sajjad Pourali, Nayanamana Samarasinghe, Mohammad Mannan
Hidden in Plain Sight: Exploring Encrypted Channels in Android Apps. CCS (2022)
Bhaskar Tejaswi, Nayanamana Samarasinghe, Sajjad Pourali, Mohammad Mannan, Amr M. Youssef
Leaky Kits: The Increased Risk of Data Exposure from Phishing Kits. eCrime (2022)
Nayanamana Samarasinghe, Aashish Adhikari, Mohammad Mannan, Amr M. Youssef
Et tu, Brute? Privacy Analysis of Government Websites and Mobile Apps. WWW (2022)
Xiufen Yu, Nayanamana Samarasinghe, Mohammad Mannan, Amr M. Youssef
Got Sick and Tracked: Privacy Analysis of Hospital Websites. EuroS&P Workshops (2022)
Nayanamana Samarasinghe, Mohammad Mannan
On cloaking behaviors of malicious websites. Comput. Secur. 101 (2021)
Mehdi Salehi, Jeremy Clark, Mohammad Mannan
Red-Black Coins: Dai Without Liquidations. Financial Cryptography Workshops (2021)
Md Shahab Uddin, Mohammad Mannan, Amr M. Youssef
Horus: A Security Assessment Framework for Android Crypto Wallets. SecureComm (2) (2021)
Suzan Ali, Mounir Elgharabawy, Quentin Duchaussoy, Mohammad Mannan, Amr M. Youssef
Parental Controls: Safer Internet Solutions or New Pitfalls? IEEE Secur. Priv. 19 (6) (2021)
Sean Peisert, Bruce Schneier, Hamed Okhravi, Fabio Massacci, Terry Benzel, Carl E. Landwehr, Mohammad Mannan, Jelena Mirkovic, Atul Prakash, James Bret Michael
Perspectives on the SolarWinds Incident. IEEE Secur. Priv. 19 (2) (2021)
Amir Mohammad Naseri, Walter Lucia, Mohammad Mannan, Amr M. Youssef
On Securing Cloud-hosted Cyber-physical Systems Using Trusted Execution Environments. CoRR (2021)
Suzan Ali, Mounir Elgharabawy, Quentin Duchaussoy, Mohammad Mannan, Amr M. Youssef
Betrayed by the Guardian: Security and Privacy Risks of Parental Control Solutions. CoRR (2020)
Ioana Boureanu, Daniel Migault, Stere Preda, Hyame Assem Alamedine, Sanjay Mishra, Frederic Fieau, Mohammad Mannan
LURK: Server-Controlled TLS Delegation. TrustCom (2020)
Kuniyasu Suzaki, Akira Tsukamoto, Andy Green, Mohammad Mannan
Reboot-Oriented IoT: Life Cycle Management in Trusted Execution Environment for Disposable IoT devices. ACSAC (2020)
Jiayi Chen, Urs Hengartner, Hassan Khan, Mohammad Mannan
Chaperone: Real-time Locking and Loss Prevention for Smartphones. USENIX Security Symposium (2020)
Elizabeth Stobert, Tina Safaie, Heather Molyneaux, Mohammad Mannan, Amr M. Youssef
ByPass: Reconsidering the Usability of Password Managers. SecureComm (1) (2020)
Mohammad Mannan, N. Asokan
Confronting the Limitations of Hardware-Assisted Security. IEEE Secur. Priv. 18 (5) (2020)
Suzan Ali, Mounir Elgharabawy, Quentin Duchaussoy, Mohammad Mannan, Amr M. Youssef
Betrayed by the Guardian: Security and Privacy Risks of Parental Control Solutions. ACSAC (2020)
Ioana Boureanu, Daniel Migault, Stere Preda, Hyame Assem Alamedine, Sanjay Mishra, Frederic Fieau, Mohammad Mannan
LURK: Server-Controlled TLS Delegation. IACR Cryptol. ePrint Arch. 2020 (2020)
Suzan Ali, Tousif Osman, Mohammad Mannan, Amr M. Youssef
On Privacy Risks of Public WiFi Captive Portals. DPM/CBT@ESORICS (2019)
Lianying Zhao, Mohammad Mannan
TEE-aided Write Protection Against Privileged Data Tampering. NDSS (2019)
Tousif Osman, Mohammad Mannan, Urs Hengartner, Amr M. Youssef
AppVeto: mobile application self-defense through resource access veto. ACSAC (2019)
Suzan Ali, Tousif Osman, Mohammad Mannan, Amr M. Youssef
On Privacy Risks of Public WiFi Captive Portals. CoRR (2019)
Sharon Shasha, Moustafa Mahmoud, Mohammad Mannan, Amr M. Youssef
Playing With Danger: A Taxonomy and Evaluation of Threats to Smart Toys. IEEE Internet Things J. 6 (2) (2019)
Nayanamana Samarasinghe, Mohammad Mannan
Towards a global perspective on web tracking. Comput. Secur. 87 (2019)
Amit Maraj, Miguel Vargas Martin, Matthew Shane, Mohammad Mannan
On the null relationship between personality types and passwords. PST (2019)
Xavier de Carné de Carnavalet, Mohammad Mannan
Privacy and Security Risks of "Not-a-Virus" Bundled Adware: The Wajam Case. CoRR (2019)
Lianying Zhao, Joseph I. Choi, Didem Demirag, Kevin R. B. Butler, Mohammad Mannan, Erman Ayday, Jeremy Clark
One-Time Programs Made Practical. Financial Cryptography (2019)
Lianying Zhao, Mohammad Mannan
TEE-aided Write Protection Against Privileged Data Tampering. CoRR (2019)
Kuniyasu Suzaki, Yohei Hori, Kazukuni Kobara, Mohammad Mannan
DeviceVeil: Robust Authentication for Individual USB Devices Using Physical Unclonable Functions. DSN (2019)
Lianying Zhao, Joseph I. Choi, Didem Demirag, Kevin R. B. Butler, Mohammad Mannan, Erman Ayday, Jeremy Clark
One-Time Programs made Practical. CoRR (2019)
Nayanamana Samarasinghe, Mohammad Mannan
Another look at TLS ecosystems in networked devices vs. Web servers. Comput. Secur. 80 (2019)
Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials. ARES (2018)
Arseny Kurnikov, Klaudia Krawiecka, Andrew Paverd, Mohammad Mannan, N. Asokan
Using SafeKeeper to Protect Web Passwords. WWW (Companion Volume) (2018)
Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials. CoRR (2018)
Louis Waked, Mohammad Mannan, Amr M. Youssef
To Intercept or Not to Intercept: Analyzing TLS Interception in Network Appliances. AsiaCCS (2018)
Klaudia Krawiecka, Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
SafeKeeper: Protecting Web Passwords using Trusted Execution Environments. WWW (2018)
Sharon Shasha, Moustafa Mahmoud, Mohammad Mannan, Amr M. Youssef
Smart But Unsafe: Experimental Evaluation of Security and Privacy Practices in Smart Toys. CoRR (2018)
Louis Waked, Mohammad Mannan, Amr M. Youssef
The Sorry State of TLS Security in Enterprise Interception Appliances. CoRR (2018)
Md Zakir Hossen, Mohammad Mannan
On Understanding Permission Usage Contextuality in Android Apps. DBSec (2018)
Klaudia Krawiecka, Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
Protecting Web Passwords from Rogue Servers using Trusted Execution Environments. CoRR (2017)
Nayanamana Samarasinghe, Mohammad Mannan
Short Paper: TLS Ecosystems in Networked Devices vs. Web Servers. Financial Cryptography (2017)
Moustafa Mahmoud, Md Zakir Hossen, Hesham Barakat, Mohammad Mannan, Amr M. Youssef
Towards a comprehensive analytical framework for smart toy privacy practices. STAST (2017)
Lianying Zhao, Mohammad Mannan
Deceptive Deletion Triggers Under Coercion. IEEE Trans. Inf. Forensics Secur. 11 (12) (2016)
Xavier de Carné de Carnavalet, Mohammad Mannan
Killed by Proxy: Analyzing Client-end TLS Interce. NDSS (2016)
Long Lu, Mohammad Mannan
Sixth Annual ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM 2016). CCS (2016)
Vladimir Rabotka, Mohammad Mannan
An evaluation of recent secure deduplication proposals. J. Inf. Secur. Appl. (2016)
Lianying Zhao, Mohammad Mannan
Hypnoguard: Protecting Secrets across Sleep-wake Cycles. CCS (2016)
Mohammad Mannan, Arash Shahkar, Atieh Saberi Pirouz, Vladimir Rabotka
Peace vs. Privacy: Leveraging Conflicting Jurisdictions for Email Security. NSPW (2015)
Xavier de Carné de Carnavalet, Mohammad Mannan
A Large-Scale Evaluation of High-Impact Password Strength Meters. ACM Trans. Inf. Syst. Secur. 18 (1) (2015)
Lianying Zhao, Mohammad Mannan
Gracewipe: Secure and Verifiable Deletion under Coercion. NDSS (2015)
Adam Skillen, Mohammad Mannan
Mobiflage: Deniable Storage Encryptionfor Mobile Devices. IEEE Trans. Dependable Secur. Comput. 11 (3) (2014)
Xavier de Carné de Carnavalet, Mohammad Mannan
Challenges and implications of verifiable builds for security-critical open-source software. ACSAC (2014)
Xavier de Carné de Carnavalet, Mohammad Mannan
From Very Weak to Very Strong: Analyzing Password-Strength Meters. NDSS (2014)
A. Mert Kara, Hamad Binsalleeh, Mohammad Mannan, Amr M. Youssef, Mourad Debbabi
Detection of malicious payload distribution channels in DNS. ICC (2014)
Adam Skillen, Mohammad Mannan
On Implementing Deniable Storage Encryption for Mobile Devices. NDSS (2013)
Lianying Zhao, Mohammad Mannan
Explicit authentication response considered harmful. NSPW (2013)
Mohammad Mannan, Paul C. van Oorschot
Passwords for Both Mobile and Desktop Computers Appendix. login Usenix Mag. 37 (4) (2012)
Mansour Alsaleh, Mohammad Mannan, Paul C. van Oorschot
Revisiting Defenses against Large-Scale Online Password Guessing Attacks. IEEE Trans. Dependable Secur. Comput. 9 (1) (2012)
Eric Lin, John Aycock, Mohammad Mannan
Lightweight Client-Side Methods for Detecting Email Forgery. WISA (2012)
Mohammad Mannan, Paul C. van Oorschot
Passwords for Both Mobile and Desktop Computers: ObPwd for Firefox and Android. login Usenix Mag. 37 (4) (2012)
Robert Biddle, Mohammad Mannan, Paul C. van Oorschot, Tara Whalen
User Study, Analysis, and Usable Security of Passwords Based on Digital Objects. IEEE Trans. Inf. Forensics Secur. 6 (3-2) (2011)
Mohammad Mannan, Paul C. van Oorschot
Leveraging personal devices for stronger password authentication from untrusted computers. J. Comput. Secur. 19 (4) (2011)
Mohammad Mannan, Beom Heyn Kim, Afshar Ganjali, David Lie
Unicorn: two-factor attestation for data security. CCS (2011)
Mohammad Mannan, David Barrera, Carson D. Brown, David Lie, Paul C. van Oorschot
Mercury: Recovering Forgotten Passwords Using Personal Devices. Financial Cryptography (2011)
Mohammad Mannan, Paul C. van Oorschot
Reducing threats from flawed security APIs: The banking PIN case. Comput. Secur. 28 (6) (2009)
Mohammad Mannan, Paul C. van Oorschot
Localization of credential information to address increasingly inevitable data breaches. NSPW (2008)
Mohammad Mannan, Paul C. van Oorschot
Weighing Down "The Unbearable Lightness of PIN Cracking". Financial Cryptography (2008)
Mohammad Mannan, Paul C. van Oorschot
Privacy-enhanced sharing of personal content on the web. WWW (2008)
Mohammad Mannan, Paul C. van Oorschot
Digital Objects as Passwords. HotSec (2008)
Mohammad Mannan, Paul C. van Oorschot
Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer. Financial Cryptography (2007)
Mohammad Mannan, Paul C. van Oorschot
Security and usability: the gap in real-world online banking. NSPW (2007)
Mohammad Mannan, Paul C. van Oorschot
A Protocol for Secure Public Instant Messaging. Financial Cryptography (2006)
Mohammad Mannan, Paul C. van Oorschot
On instant messaging worms, analysis and countermeasures. WORM (2005)
Mohammad Mannan, Paul C. van Oorschot
Secure Public Instant Messaging. PST (2004)