How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study 
Marco Gutfleisch, Jan Klemmer, Niklas Busch, Yasemin Acar, Angela Sasse, Sascha Fahl 
Proceedings of the 2022 IEEE Symposium on Security and Privacy - Oakland'22

Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany 
Maximilian Häring, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, Yasemin Acar 
Proceedings of the 2021 USENIX Symposium on Usable Privacy and Security - SOUPS'21

Investigating Web Service Account Remediation Advice 
Lorenzo Neil, Elijah Bouma-Sims, Evan Lafontaine, Yasemin Acar, Bradley Reaves 
Proceedings of the 2021 USENIX Symposium on Usable Privacy and Security - SOUPS'21

On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security 
Christian Stransky, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna-Lena Fehlhaber, Miranda Wei, Blase Ur, Sascha Fahl 
Proceedings of the 2021 USENIX Symposium on Usable Privacy and Security - SOUPS'21

They Would do Better if They Worked Together: The Case of Interaction Problems Between Password Managers and Websites 
Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, Sascha Fahl 
Proceedings of the 2021 IEEE Symposium on Security and Privacy - Oakland'21

A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises 
Nicolas Huaman, Bennet von Skarczinski, Christian Stransky, Dominik Wermke, Yasemin Acar, Arne Dreißigacker, Sascha Fahl 
Proceedings of the 2021 USENIX Security Symposium - SEC'21

"It's the Company, the Government, You and I": User Perceptions of Responsibility for Smart Home Privacy and Security 
Julie Haney, Yasemin Acar, and Susanne Furman 
Proceedings of the 2021 USENIX Security Symposium - SEC'21

Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications 
Marten Oltrogge, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes, Sascha Fahl 
Proceedings of the 2021 USENIX Security Symposium - SEC'21

Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs 
Peter Leo Gorski, Yasemin Acar, Luigi Lo Iacono, Sascha Fahl 
Proceedings of the 2020 ACM CHI Conference on Human Factors in Computing Systems - CHI'20

Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites 
Dominik Wermke, Christian Stransky, Nicolas Huaman, Niklas Busch, Yasemin Acar, and Sascha Fahl 
Proceedings of the 2020 USENIX Symposium on Usable Privacy and Security - SOUPS'20

A Large Scale Investigation of Obfuscation Use in Google Play 
Dominik Wermke, Nicolas Huaman, Yasemin Acar, Brad Reaves, Patrick Traynor, Sascha Fahl 
Proceedings of the 2018 Annual Computer Security Applications Conference - ACSAC'18

"We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products 
Julie Haney, Mary Theofanos, Yasemin Acar, Sandra Spickard Prettyman 
Proceedings of the 2018 Symposium on Usable Privacy and Security - SOUPS'18

Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse 
Peter Leo Gorski, Luigi Lo Iacono, Dominik Wermke, Christian Stransky, Sebastian Möller, Yasemin Acar, Sascha Fahl 
Proceedings of the 2018 Symposium on Usable Privacy and Security - SOUPS'18

Your Secrets Are Safe: How Browsers' Explanations Impact Misconceptions About Private Browsing Mode 
Yuxi Wu, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, Blase Ur 
Proceedings of the Web Conference 2018 - WWW'18 (to appear)

The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators 
Marten Oltrogge, Erik Derr, Christian Stransky, Sven Bugiel, Giancarlo Pellegrino, Christian Rossow, Sascha Fahl, Yasemin Acar, Michael Backes 
Proceedings of the 2018 IEEE Symposium on Security and Privacy - Oakland'18

A Stitch in Time: Supporting Android Developers in Writing Secure Code 
Duc Cuong Nguyen, Dominik Wermke, Yasemin Acar, Michael Backes, Charles Weir, Sascha Fahl 
Proceedings of the 2017 ACM Conference on Computer and Communications Security - CCS'17

Keep me updated: An Empirical Study of Third-Party Library Updatability on Android 
Erik Derr, Sven Bugiel, Sascha Fahl, Yasemin Acar, Michael Backes 
Proceedings of the 2017 ACM Conference on Computer and Communications Security - CCS'17

Developers Need Support, Too: A Survey of Security Advice for Software Developers 
Yasemin Acar, Christian Stransky, Dominik Wermke, Charles Weir, Michelle Mazurek, Sascha Fahl 
Proceedings of the 2017 IEEE Secure Development Conference - SecDev'17

Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers 
Christian Stransky, Yasemin Acar, Duc Cuong Nguyen, Dominik Wermke, Elissa M. Redmiles, Doowon Kim, Michael Backes, Simson Garfinkel, Michelle Mazurek, Sascha Fahl 
Proceedings of the 2017 USENIX Workshop on Cyber Security Experimentation and Test - CSET'17

Security Developer Studies with GitHub Users: Exploring a Convenience Sample 
Yasemin Acar, Christian Stransky, Dominik Wermke, Michelle Mazurek, Sascha Fahl 
Proceedings of the 2017 Symposium on Usable Privacy and Security - SOUPS'17

Comparing the Usability of Cryptographic APIs 
Yasemin Acar, Michael Backes, Sascha Fahl, Simson Garfinkel, Doowon Kim, Michelle Mazurek, Christian Stransky 
Proceedings of the 2017 IEEE Symposium on Security and Privacy - Oakland'17

Stack Overflow Considered Harmful? The Impact of Copy & Paste on Android Application Security 
Felix Fischer, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, Sascha Fahl 
Proceedings of the 2017 IEEE Symposium on Security and Privacy - Oakland'17

Leading By (Insecure) Example: How Internet Resources Might be Helping You Develop Faster But Less Securely 
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle Mazurek, Christian Stransky 
IEEE Security and Privacy 2016

You Are Not Your Developer, Either: A Research Agenda For Usable Security and Privacy Research Beyond End Users 
Yasemin Acar, Sascha Fahl, Michelle Mazurek 
Proceedings of the 2016 IEEE SecDev - SecDev'16

An Empirical Study of Textual Key-Fingerprint Representations 
Sergej Dechand, Dominik Schürmann, Karoline Busse, Yasemin Acar, Sascha Fahl, Matthew Smith 
Proceedings of the 2016 USENIX Security Symposium - SEC'16

You Get Where You're Looking For - The Impact of Information Sources on Code Security 
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle Mazurek, Christian Stransky 
Proceedings of the 2016 IEEE Symposium on Security and Privacy - Oakland'16

SoK: Lessons Learned From Android Security Research For Appified Software Platforms 
Yasemin Acar, Michael Backes, Sven Bugiel, Sascha Fahl, Patrick McDaniel, Matthew Smith 
Proceedings of the 2016 IEEE Symposium on Security and Privacy - Oakland'16

To Pin or Not to Pin - Helping App Developers To Bulletproof Their TLS Connections 
Marten Oltrogge, Yasemin Acar, Sergej Dechand, Matthew Smith, Sascha Fahl 
Proceedings of the 2015 USENIX Security Symposium - SEC'15

VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits 
Henning Perl, Daniel Arp, Sergej Dechand, Sascha Fahl, Yasemin Acar, Fabian Yamaguchi, Konrad Rieck, Matthew Smith 
Proceedings of the 2015 ACM Conference on Computer and Communications Security - CCS'15

Why Eve and Mallory (Also) Love Webmasters: A Study on the Root Causes of SSL Misconfigurations 
Sascha Fahl, Yasemin Acar, Henning Perl, Matthew Smith 
Proceedings of the 2014 ACM Symposium on Information, Computer and Communications Security - AsiaCCS'14

On The Ecological Validity of a Password Study 
Sascha Fahl, Marian Harbach, Yasemin Acar, Matthew Smith 
Proceedings of the 2013 Symposium on Usable Privacy and Security - SOUPS'13