Yasemin Acar

Publication Activity (10 Years)

Years Active: 2013-2024
Publications (10 Years): 84

Top Topics

Lessons Learned

Top Venues

USENIX Security Symposium

IEEE Symposium on Security and Privacy

SOUPS @ USENIX Security Symposium

Publications

Anastassija Kostan, Sara Olschar, Lucy Simko, Yasemin Acar
Exploring digital security and privacy in relative poverty in Germany through qualitative interviews. USENIX Security Symposium (2024)
Kabir Panahi, Shawn Robertson, Yasemin Acar, Alexandru G. Bardas, Tadayoshi Kohno, Lucy Simko
"But they have overlooked a few things in Afghanistan: " An Analysis of the Integration of Biometric Voter Verification in the 2019 Afghan Presidential Elections. USENIX Security Symposium (2024)
Juliane Schmüser, Harshini Sri Ramulu, Noah Wöhler, Christian Stransky, Felix Bensmann, Dimitar Dimitrov, Sebastian Schellhammer, Dominik Wermke, Stefan Dietze, Yasemin Acar, Sascha Fahl
Analyzing Security and Privacy Advice During the 2022 Russian Invasion of Ukraine on Twitter. CHI (2024)
Eric Bodden, Yasemin Acar, Michael Felderer, Wilhelm Hasselbring, Paula Herber, Bernhard Rumpe
Ernst Denert Preis 2023. Softwaretechnik-Trends 44 (2) (2024)
Jan Jancar, Marcel Fourné, Daniel De Almeida Braga, Mohamed Sabt, Peter Schwabe, Gilles Barthe, Pierre-Alain Fouque, Yasemin Acar
They're not that hard to mitigate: What Cryptographic Library Developers Think About Timing Attacks. Software Engineering (2024)
Harshini Sri Ramulu, Helen Schmitt, Dominik Wermke, Yasemin Acar
Security and Privacy Software Creators' Perspectives on Unintended Consequences. USENIX Security Symposium (2024)
Nicolas Huaman, Jacques Suray, Jan H. Klemmer, Marcel Fourné, Sabrina Amft, Ivana Trummová, Yasemin Acar, Sascha Fahl
"You have to read 50 different RFCs that contradict each other": An Interview Study on the Experiences of Implementing Cryptographic Standards. USENIX Security Symposium (2024)
Greg Tystahl, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. CoRR (2024)
Dominik Wermke, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, Sascha Fahl
Committed to Trust: A Qualitative Study on Security and Trust in Open Source Software Projects. Software Engineering (2024)
Lina Boughton, Courtney Miller, Yasemin Acar, Dominik Wermke, Christian Kästner
Decomposing and Measuring Trust in Open-Source Software Supply Chains. NIER@ICSE (2024)
Dominik Wermke, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, Sascha Fahl
Always Contribute Back: A Qualitative Study on Security Challenges of the Open Source Supply Chain. Software Engineering (2024)
Stefan Albert Horstmann, Samuel Domiks, Marco Gutfleisch, Mindy Tran, Yasemin Acar, Veelasha Moonsamy, Alena Naiakshina
"Those things are written by lawyers, and programmers are reading that." Mapping the Communication Gap Between Software Developers and Privacy Experts. Proc. Priv. Enhancing Technol. 2024 (1) (2024)
Marcel Fourné, Daniel De Almeida Braga, Jan Jancar, Mohamed Sabt, Peter Schwabe, Gilles Barthe, Pierre-Alain Fouque, Yasemin Acar
"These results must be false": A usability evaluation of constant-time analysis tools. USENIX Security Symposium (2024)
Sandra Höltervennhoff, Noah Wöhler, Arne Möhle, Marten Oltrogge, Yasemin Acar, Oliver Wiese, Sascha Fahl
A Mixed-Methods Study on User Experiences and Challenges of Recovery Codes for an End-to-End Encrypted Service. USENIX Security Symposium (2024)
Konstantin Fischer, Ivana Trummová, Phillip Gajland, Yasemin Acar, Sascha Fahl, M. Angela Sasse
The Challenges of Bringing Cryptography from Research Papers to Products: Results from an Interview Study with Experts. USENIX Security Symposium (2024)
Dominik Wermke, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, Sascha Fahl
"Always Contribute Back": A Qualitative Study on Security Challenges of the Open Source Supply Chain. SP (2023)
Marcel Fourné, Dominik Wermke, William Enck, Sascha Fahl, Yasemin Acar
It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security. SP (2023)
Mannat Kaur, Harshini Sri Ramulu, Yasemin Acar, Tobias Fiebig
"Oh yes! over-preparing for meetings is my jam :)": The Gendered Experiences of System Administrators. Proc. ACM Hum. Comput. Interact. 7 (CSCW1) (2023)
Lucy Simko, Harshini Sri Ramulu, Tadayoshi Kohno, Yasemin Acar
The Use and Non-Use of Technology During Hurricanes. Proc. ACM Hum. Comput. Interact. 7 (CSCW2) (2023)
Elijah Bouma-Sims, Yasemin Acar
Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender. Proc. ACM Hum. Comput. Interact. 7 (CSCW1) (2023)
Mindy Tran, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit. CoRR (2023)
Lorenzo Neil, Harshini Sri Ramulu, Yasemin Acar, Bradley Reaves
Who Comes Up with this Stuff? Interviewing Authors to Understand How They Produce Security Advice. SOUPS (2023)
Jens Pottebaum, Jost Rossel, Juraj Somorovsky, Yasemin Acar, René Fahr, Patricia Arias Cabarcos, Eric Bodden, Iris Gräßler
Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. EuroS&P Workshops (2023)
Tadayoshi Kohno, Yasemin Acar, Wulf Loh
Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations. USENIX Security Symposium (2023)
Elijah Bouma-Sims, Yasemin Acar
Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender. CoRR (2023)
Tadayoshi Kohno, Yasemin Acar, Wulf Loh
Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations. CoRR (2023)
Jan H. Klemmer, Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, Sascha Fahl
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication. CoRR (2023)
William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2023-06: Government Secure Supply Chain Summit. CoRR (2023)
Franziska Herbert, Steffen Becker, Leonie Schaewitz, Jonas Hielscher, Marvin Kowalewski, M. Angela Sasse, Yasemin Acar, Markus Dürmuth
A World Full of Privacy and Security (Mis)conceptions? Findings of a Representative Survey in 12 Countries. CHI (2023)
Marcel Fourné, Dominik Wermke, Sascha Fahl, Yasemin Acar
A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda. IEEE Secur. Priv. 21 (6) (2023)
Jan H. Klemmer, Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, Sascha Fahl
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication. CCS (2023)
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, Sascha Fahl
Lost and not Found: An Investigation of Recovery Methods for Multi-Factor Authentication. CoRR (2023)
Trevor Dunlap, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2023-02: Industry Secure Supply Chain Summit. CoRR (2023)
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, Sascha Fahl
"We've Disabled MFA for You": An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments. CCS (2023)
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Yasemin Acar, Sascha Fahl
"Would You Give the Same Priority to the Bank and a Game? I Do Not!" Exploring Credential Management Strategies and Obstacles during Password Manager Setup. SOUPS (2023)
Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, Sascha Fahl
Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories. USENIX Security Symposium (2023)
Jaron Mink, Harjot Kaur, Juliane Schmüser, Sascha Fahl, Yasemin Acar
"Security is not my field, I'm a stats guy": A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry. USENIX Security Symposium (2023)
Dilara Keküllüoglu, Yasemin Acar
"We are a startup to the core": A qualitative interview study on the security and privacy development practices in Turkish software startups. SP (2023)
Sandra Höltervennhoff, Philip Klostermeyer, Noah Wöhler, Yasemin Acar, Sascha Fahl
"I wouldn't want my unsafe code to run my pacemaker": An Interview Study on the Use, Comprehension, and Perceived Risks of Unsafe Rust. USENIX Security Symposium (2023)
Collins W. Munyendo, Yasemin Acar, Adam J. Aviv
"In Eighty Percent of the Cases, I Select the Password for Them": Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya. SP (2023)
Stefan Krüger, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Yasemin Acar, Mira Mezini, Sascha Fahl
Securing Your Crypto-API Usage Through Tool Support - A Usability Study. SecDev (2023)
Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, Sascha Fahl
They Would Do Better If They Worked Together: Interaction Problems Between Password Managers and the Web. IEEE Secur. Priv. 20 (2) (2022)
Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, Sascha Fahl
Committed by Accident: Studying Prevention and Remediation Strategies Against Secret Leakage in Source Code Repositories. CoRR (2022)
Marco Gutfleisch, Jan H. Klemmer, Niklas Busch, Yasemin Acar, M. Angela Sasse, Sascha Fahl
How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study. IEEE Symposium on Security and Privacy (2022)
Dilara Keküllüoglu, Yasemin Acar
"We are a startup to the core": A qualitative interview study on the security and privacy development practices in Turkish software startups. CoRR (2022)
Franziska Herbert, Steffen Becker, Annalina Buckmann, Marvin Kowalewski, Jonas Hielscher, Leonie Schaewitz, Jennifer Friedauer, Yasemin Acar, Markus Dürmuth, M. Angela Sasse
Talking to the Overlooked: A Nationwide Telephone Survey with Four Groups Under-represented in Privacy and Security Studies. CoRR (2022)
Harjot Kaur, Sabrina Amft, Daniel Votipka, Yasemin Acar, Sascha Fahl
Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples. USENIX Security Symposium (2022)
Collins W. Munyendo, Yasemin Acar, Adam J. Aviv
"Desperate Times Call for Desperate Measures": User Concerns with Mobile Loan Apps in Kenya. IEEE Symposium on Security and Privacy (2022)
Jan Jancar, Marcel Fourné, Daniel De Almeida Braga, Mohamed Sabt, Peter Schwabe, Gilles Barthe, Pierre-Alain Fouque, Yasemin Acar
"They're not that hard to mitigate": What Cryptographic Library Developers Think About Timing Attacks. IEEE Symposium on Security and Privacy (2022)
Juliane Schmüser, Noah Wöhler, Harshini Sri Ramulu, Christian Stransky, Dominik Wermke, Sascha Fahl, Yasemin Acar
"Please help share!": Security and Privacy Advice on Twitter during the 2022 Russian Invasion of Ukraine. CoRR (2022)
Nicolas Huaman, Alexander Krause, Dominik Wermke, Jan H. Klemmer, Christian Stransky, Yasemin Acar, Sascha Fahl
If You Can't Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers. SOUPS @ USENIX Security Symposium (2022)
Christian Stransky, Oliver Wiese, Volker Roth, Yasemin Acar, Sascha Fahl
27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University. IEEE Symposium on Security and Privacy (2022)
Dominik Wermke, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, Sascha Fahl
Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects. IEEE Symposium on Security and Privacy (2022)
Franziska Herbert, Steffen Becker, Leonie Schaewitz, Jonas Hielscher, Marvin Kowalewski, M. Angela Sasse, Yasemin Acar, Markus Dürmuth
A World Full of Privacy and Security (Mis)conceptions? Findings of a Representative Survey in 12 Countries. CoRR (2022)
Maximilian Häring, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, Yasemin Acar
Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany. SOUPS @ USENIX Security Symposium (2021)
Julie M. Haney, Yasemin Acar, Susanne Furman
"It's the Company, the Government, You and I": User Perceptions of Responsibility for Smart Home Privacy and Security. USENIX Security Symposium (2021)
Marten Oltrogge, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes, Sascha Fahl
Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications. USENIX Security Symposium (2021)
Christian Stransky, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna Lena Fehlhaber, Miranda Wei, Blase Ur, Sascha Fahl
On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security. SOUPS @ USENIX Security Symposium (2021)
Nicolas Huaman, Bennet von Skarczinski, Christian Stransky, Dominik Wermke, Yasemin Acar, Arne Dreißigacker, Sascha Fahl
A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises. USENIX Security Symposium (2021)
Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, Sascha Fahl
They Would do Better if They Worked Together: The Case of Interaction Problems Between Password Managers and Websites. IEEE Symposium on Security and Privacy (2021)
Lorenzo Neil, Elijah Bouma-Sims, Evan Lafontaine, Yasemin Acar, Bradley Reaves
Investigating Web Service Account Remediation Advice. SOUPS @ USENIX Security Symposium (2021)
Jan Jancar, Marcel Fourné, Daniel De Almeida Braga, Mohamed Sabt, Peter Schwabe, Gilles Barthe, Pierre-Alain Fouque, Yasemin Acar
âTheyâre not that hard to mitigateâ: What Cryptographic Library Developers Think About Timing Attacks. IACR Cryptol. ePrint Arch. 2021 (2021)
Julie M. Haney, Susanne M. Furman, Yasemin Acar
Smart Home Security and Privacy Mitigations: Consumer Perceptions, Practices, and Challenges. HCI (30) (2020)
Dominik Wermke, Nicolas Huaman, Christian Stransky, Niklas Busch, Yasemin Acar, Sascha Fahl
Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites. SOUPS @ USENIX Security Symposium (2020)
Peter Leo Gorski, Yasemin Acar, Luigi Lo Iacono, Sascha Fahl
Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs. CHI (2020)
Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, Sascha Fahl
A Large Scale Investigation of Obfuscation Use in Google Play. ACSAC (2018)
Julie M. Haney, Mary Theofanos, Yasemin Acar, Sandra Spickard Prettyman
"We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products. SOUPS @ USENIX Security Symposium (2018)
Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes
The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. IEEE Symposium on Security and Privacy (2018)
Peter Leo Gorski, Luigi Lo Iacono, Dominik Wermke, Christian Stransky, Sebastian Möller, Yasemin Acar, Sascha Fahl
Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse. SOUPS @ USENIX Security Symposium (2018)
Yuxi Wu, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, Blase Ur
Your Secrets Are Safe: How Browsers' Explanations Impact Misconceptions About Private Browsing Mode. WWW (2018)
Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, Sascha Fahl
A Large Scale Investigation of Obfuscation Use in Google Play. CoRR (2018)
Erik Derr, Sven Bugiel, Sascha Fahl, Yasemin Acar, Michael Backes
Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android. CCS (2017)
Yasemin Acar, Christian Stransky, Dominik Wermke, Michelle L. Mazurek, Sascha Fahl
Security Developer Studies with GitHub Users: Exploring a Convenience Sample. SOUPS (2017)
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, Christian Stransky
How Internet Resources Might Be Helping You Develop Faster but Less Securely. IEEE Secur. Priv. 15 (2) (2017)
Duc Cuong Nguyen, Dominik Wermke, Yasemin Acar, Michael Backes, Charles Weir, Sascha Fahl
A Stitch in Time: Supporting Android Developers in WritingSecure Code. CCS (2017)
Felix Fischer, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, Sascha Fahl
Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security. CoRR (2017)
Christian Stransky, Yasemin Acar, Duc Cuong Nguyen, Dominik Wermke, Doowon Kim, Elissa M. Redmiles, Michael Backes, Simson L. Garfinkel, Michelle L. Mazurek, Sascha Fahl
Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers. CSET @ USENIX Security Symposium (2017)
Yasemin Acar, Christian Stransky, Dominik Wermke, Charles Weir, Michelle L. Mazurek, Sascha Fahl
Developers Need Support, Too: A Survey of Security Advice for Software Developers. SecDev (2017)
Yasemin Acar, Michael Backes, Sascha Fahl, Simson L. Garfinkel, Doowon Kim, Michelle L. Mazurek, Christian Stransky
Comparing the Usability of Cryptographic APIs. IEEE Symposium on Security and Privacy (2017)
Felix Fischer, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, Sascha Fahl
Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security. IEEE Symposium on Security and Privacy (2017)
Sergej Dechand, Dominik Schürmann, Karoline Busse, Yasemin Acar, Sascha Fahl, Matthew Smith
An Empirical Study of Textual Key-Fingerprint Representations. USENIX Security Symposium (2016)
Yasemin Acar, Sascha Fahl, Michelle L. Mazurek
You are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users. SecDev (2016)
Yasemin Acar, Michael Backes, Sven Bugiel, Sascha Fahl, Patrick D. McDaniel, Matthew Smith
SoK: Lessons Learned from Android Security Research for Appified Software Platforms. IEEE Symposium on Security and Privacy (2016)
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, Christian Stransky
You Get Where You're Looking for: The Impact of Information Sources on Code Security. IEEE Symposium on Security and Privacy (2016)
Marten Oltrogge, Yasemin Acar, Sergej Dechand, Matthew Smith, Sascha Fahl
To Pin or Not to Pin-Helping App Developers Bullet Proof Their TLS Connections. USENIX Security Symposium (2015)
Henning Perl, Sergej Dechand, Matthew Smith, Daniel Arp, Fabian Yamaguchi, Konrad Rieck, Sascha Fahl, Yasemin Acar
VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits. CCS (2015)
Sascha Fahl, Yasemin Acar, Henning Perl, Matthew Smith
Why eve and mallory (also) love webmasters: a study on the root causes of SSL misconfigurations. AsiaCCS (2014)
Sascha Fahl, Marian Harbach, Yasemin Acar, Matthew Smith
On the ecological validity of a password study. SOUPS (2013)