Mohammad Mannan

117 papers A* 18A 9B 3C 10Misc 1Journal 48Unranked 25
YearRankTypeTitle / Venue / Authors
2026 J jnl
Rhea: Detecting Privilege-Escalated Evasive Ransomware Attacks Using Format-Aware Validation in the Cloud.
CoRR
Beom Heyn Kim, Seok Min Hong, Mohammad Mannan
2026 J jnl
The Silent Spill: Measuring Sensitive Data Leaks Across Public URL Repositories.
CoRR
Tarek Ramadan, AbdelRahman Abdou, Mohammad Mannan, Amr M. Youssef
2025 — conf
"Lying makes me look suspicious": Users' Perspectives and Analysis of Security Questions.
EuroUSEC
Xin Sun, Kavous Salehzadeh Niksirat, Kévin Huguenin, Mohammad Mannan, Amr M. Youssef
2025 J jnl
LURK-T: Limited Use of Remote Keys With Added Trust in TLS 1.3.
CoRR
Behnam Shobiri, Sajjad Pourali, Daniel Migault, Ioana Boureanu, Stere Preda, Mohammad Mannan, Amr M. Youssef
2024 — conf
"Trust Me Over My Privacy Policy": Privacy Discrepancies in Romantic AI Chatbot Apps.
EuroS&P Workshops
Abdelrahman Ragab, Mohammad Mannan, Amr M. Youssef
2024 J jnl
LURK-T: Limited Use of Remote Keys With Added Trust in TLS 1.3.
IEEE Trans. Netw. Sci. Eng.
Behnam Shobiri, Sajjad Pourali, Daniel Migault, Ioana Boureanu, Stere Preda, Mohammad Mannan, Amr M. Youssef
2024 J jnl
On Detecting and Measuring Exploitable JavaScript Functions in Real-world Applications.
ACM Trans. Priv. Secur.
Maryna Kluban, Mohammad Mannan, Amr M. Youssef
2024 A* conf
Poster: Detecting Ransomware Attacks by Analyzing Replicated Block Snapshots Using Neural Networks.
CCS
Seok Min Hong, Beom Heyn Kim, Mohammad Mannan
2024 A* conf
Racing for TLS Certificate Validation: A Hijacker's Guide to the Android TLS Galaxy.
USENIX Security Symposium
Sajjad Pourali, Xiufen Yu, Lianying Zhao, Mohammad Mannan, Amr M. Youssef
2024 J jnl
Security Weaknesses in IoT Management Platforms.
IEEE Internet Things J.
Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
2024 — conf
TEE-Receipt: A TEE-Based Non-repudiation Framework for Web Applications.
SecureComm (2)
Mahmoud Hofny, Lianying Zhao, Mohammad Mannan, Amr M. Youssef
2024 J jnl
WARNE: A stalkerware evidence collection tool.
Forensic Sci. Int. Digit. Investig.
Philippe Mangeard, Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
2023 A* conf
"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software.
USENIX Security Symposium
Jonah Stegman, Patrick J. Trottier, Caroline Hillier, Hassan Khan, Mohammad Mannan
2023 J jnl
APTHunter: Detecting Advanced Persistent Threats in Early Stages.
DTRAP
Moustafa Mahmoud, Mohammad Mannan, Amr M. Youssef
2023 — conf
All Your IoT Devices Are Belong to Us: Security Weaknesses in IoT Management Platforms.
CODASPY
Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
2023 A* conf
All Your Shops Are Belong to Us: Security Weaknesses in E-commerce Platforms.
WWW
Rohan Pagey, Mohammad Mannan, Amr M. Youssef
2023 J jnl
CDNs' Dark Side: Security Problems in CDN-to-Origin Connections.
DTRAP
Behnam Shobiri, Mohammad Mannan, Amr M. Youssef
2023 A conf
Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case.
RAID
Supraja Baskaran, Lianying Zhao, Mohammad Mannan, Amr M. Youssef
2023 J jnl
Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case.
CoRR
Supraja Baskaran, Lianying Zhao, Mohammad Mannan, Amr M. Youssef
2023 — conf
No Place to Hide: Privacy Exposure in Anti-stalkerware Apps and Support Websites.
NordSec
Philippe Mangeard, Xiufen Yu, Mohammad Mannan, Amr M. Youssef
2023 J jnl
Security Weaknesses in IoT Management Platforms.
CoRR
Bhaskar Tejaswi, Mohammad Mannan, Amr M. Youssef
2023 — conf
Try On, Spied On?: Privacy Analysis of Virtual Try-On Websites and Android Apps.
ESORICS Workshops (1)
Abdelrahman Ragab, Mohammad Mannan, Amr M. Youssef
2022 J jnl
"Free" as in Freedom to Protest?
IEEE Secur. Priv.
Fabio Massacci, Antonino Sabetta, Jelena Mirkovic, Toby Murray, Hamed Okhravi, Mohammad Mannan, Anderson Rocha, Eric Bodden, Daniel E. Geer
2022 J jnl
"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software.
CoRR
Jonah Stegman, Patrick J. Trottier, Caroline Hillier, Hassan Khan, Mohammad Mannan
2022 J jnl
Blindfold: Keeping Private Keys in PKIs and CDNs out of Sight.
CoRR
Hisham S. Galal, Mohammad Mannan, Amr M. Youssef
2022 J jnl
Blindfold: Keeping private keys in PKIs and CDNs out of sight.
Comput. Secur.
Hisham S. Galal, Mohammad Mannan, Amr M. Youssef
2022 A* conf
Et tu, Brute? Privacy Analysis of Government Websites and Mobile Apps.
WWW
Nayanamana Samarasinghe, Aashish Adhikari, Mohammad Mannan, Amr M. Youssef
2022 — conf
Got Sick and Tracked: Privacy Analysis of Hospital Websites.
EuroS&P Workshops
Xiufen Yu, Nayanamana Samarasinghe, Mohammad Mannan, Amr M. Youssef
2022 A* conf
Hidden in Plain Sight: Exploring Encrypted Channels in Android Apps.
CCS
Sajjad Pourali, Nayanamana Samarasinghe, Mohammad Mannan
2022 J jnl
Hidden in Plain Sight: Exploring Encrypted Channels in Android apps.
CoRR
Sajjad Pourali, Nayanamana Samarasinghe, Mohammad Mannan
2022 — conf
Leaky Kits: The Increased Risk of Data Exposure from Phishing Kits.
eCrime
Bhaskar Tejaswi, Nayanamana Samarasinghe, Sajjad Pourali, Mohammad Mannan, Amr M. Youssef
2022 — conf
No Salvation from Trackers: Privacy Analysis of Religious Websites and Mobile Apps.
DPM/CBT@ESORICS
Nayanamana Samarasinghe, Pranay Kapoor, Mohammad Mannan, Amr M. Youssef
2022 — conf
Not so Immutable: Upgradeability of Smart Contracts on Ethereum.
Financial Cryptography Workshops
Mehdi Salehi, Jeremy Clark, Mohammad Mannan
2022 J jnl
Not so immutable: Upgradeability of Smart Contracts on Ethereum.
CoRR
Mehdi Salehi, Jeremy Clark, Mohammad Mannan
2022 A conf
On Measuring Vulnerable JavaScript Functions in the Wild.
AsiaCCS
Maryna Kluban, Mohammad Mannan, Amr M. Youssef
2022 J jnl
SAUSAGE: Security Analysis of Unix domain Socket Usage in Android.
CoRR
Mounir Elgharabawy, Blas Kojusner, Mohammad Mannan, Kevin R. B. Butler, Byron Williams, Amr M. Youssef
2022 A conf
SAUSAGE: Security Analysis of Unix domain Socket usAGE in Android.
EuroS&P
Mounir Elgharabawy, Blas Kojusner, Mohammad Mannan, Kevin R. B. Butler, Byron Williams, Amr M. Youssef
2022 C conf
Silver Surfers on the Tech Wave: Privacy Analysis of Android Apps for the Elderly.
SecureComm
Pranay Kapoor, Rohan Pagey, Mohammad Mannan, Amr M. Youssef
2021 — conf
Horus: A Security Assessment Framework for Android Crypto Wallets.
SecureComm (2)
Md Shahab Uddin, Mohammad Mannan, Amr M. Youssef
2021 J jnl
On Securing Cloud-hosted Cyber-physical Systems Using Trusted Execution Environments.
CoRR
Amir Mohammad Naseri, Walter Lucia, Mohammad Mannan, Amr M. Youssef
2021 J jnl
On cloaking behaviors of malicious websites.
Comput. Secur.
Nayanamana Samarasinghe, Mohammad Mannan
2021 J jnl
Parental Controls: Safer Internet Solutions or New Pitfalls?
IEEE Secur. Priv.
Suzan Ali, Mounir Elgharabawy, Quentin Duchaussoy, Mohammad Mannan, Amr M. Youssef
2021 J jnl
Perspectives on the SolarWinds Incident.
IEEE Secur. Priv.
Sean Peisert, Bruce Schneier, Hamed Okhravi, Fabio Massacci, Terry Benzel, Carl E. Landwehr, Mohammad Mannan, Jelena Mirkovic, Atul Prakash, James Bret Michael
2021 — conf
Red-Black Coins: Dai Without Liquidations.
Financial Cryptography Workshops
Mehdi Salehi, Jeremy Clark, Mohammad Mannan
2020 A conf
Betrayed by the Guardian: Security and Privacy Risks of Parental Control Solutions.
ACSAC
Suzan Ali, Mounir Elgharabawy, Quentin Duchaussoy, Mohammad Mannan, Amr M. Youssef
2020 J jnl
Betrayed by the Guardian: Security and Privacy Risks of Parental Control Solutions.
CoRR
Suzan Ali, Mounir Elgharabawy, Quentin Duchaussoy, Mohammad Mannan, Amr M. Youssef
2020 — conf
ByPass: Reconsidering the Usability of Password Managers.
SecureComm (1)
Elizabeth Stobert, Tina Safaie, Heather Molyneaux, Mohammad Mannan, Amr M. Youssef
2020 A* conf
Chaperone: Real-time Locking and Loss Prevention for Smartphones.
USENIX Security Symposium
Jiayi Chen, Urs Hengartner, Hassan Khan, Mohammad Mannan
2020 J jnl
Confronting the Limitations of Hardware-Assisted Security.
IEEE Secur. Priv.
Mohammad Mannan, N. Asokan
2020 B conf
LURK: Server-Controlled TLS Delegation.
TrustCom
Ioana Boureanu, Daniel Migault, Stere Preda, Hyame Assem Alamedine, Sanjay Mishra, Frederic Fieau, Mohammad Mannan
2020 J jnl
LURK: Server-Controlled TLS Delegation.
IACR Cryptol. ePrint Arch.
Ioana Boureanu, Daniel Migault, Stere Preda, Hyame Assem Alamedine, Sanjay Mishra, Frederic Fieau, Mohammad Mannan
2020 A conf
Reboot-Oriented IoT: Life Cycle Management in Trusted Execution Environment for Disposable IoT devices.
ACSAC
Kuniyasu Suzaki, Akira Tsukamoto, Andy Green, Mohammad Mannan
2020 J jnl
Securing Applications against Side-channel Attacks through Resource Access Veto.
DTRAP
Tousif Osman, Mohammad Mannan, Urs Hengartner, Amr M. Youssef
2020 J jnl
The Sorry State of TLS Security in Enterprise Interception Appliances.
DTRAP
Louis Waked, Mohammad Mannan, Amr M. Youssef
2019 J jnl
Another look at TLS ecosystems in networked devices vs. Web servers.
Comput. Secur.
Nayanamana Samarasinghe, Mohammad Mannan
2019 A conf
AppVeto: mobile application self-defense through resource access veto.
ACSAC
Tousif Osman, Mohammad Mannan, Urs Hengartner, Amr M. Youssef
2019 A conf
DeviceVeil: Robust Authentication for Individual USB Devices Using Physical Unclonable Functions.
DSN
Kuniyasu Suzaki, Yohei Hori, Kazukuni Kobara, Mohammad Mannan
2019 — conf
On Privacy Risks of Public WiFi Captive Portals.
DPM/CBT@ESORICS
Suzan Ali, Tousif Osman, Mohammad Mannan, Amr M. Youssef
2019 J jnl
On Privacy Risks of Public WiFi Captive Portals.
CoRR
Suzan Ali, Tousif Osman, Mohammad Mannan, Amr M. Youssef
2019 C conf
On the null relationship between personality types and passwords.
PST
Amit Maraj, Miguel Vargas Martin, Matthew Shane, Mohammad Mannan
2019 — conf
One-Time Programs Made Practical.
Financial Cryptography
Lianying Zhao, Joseph I. Choi, Didem Demirag, Kevin R. B. Butler, Mohammad Mannan, Erman Ayday, Jeremy Clark
2019 J jnl
One-Time Programs made Practical.
CoRR
Lianying Zhao, Joseph I. Choi, Didem Demirag, Kevin R. B. Butler, Mohammad Mannan, Erman Ayday, Jeremy Clark
2019 J jnl
Playing With Danger: A Taxonomy and Evaluation of Threats to Smart Toys.
IEEE Internet Things J.
Sharon Shasha, Moustafa Mahmoud, Mohammad Mannan, Amr M. Youssef
2019 J jnl
Privacy and Security Risks of "Not-a-Virus" Bundled Adware: The Wajam Case.
CoRR
Xavier de Carné de Carnavalet, Mohammad Mannan
2019 A* conf
TEE-aided Write Protection Against Privileged Data Tampering.
NDSS
Lianying Zhao, Mohammad Mannan
2019 J jnl
TEE-aided Write Protection Against Privileged Data Tampering.
CoRR
Lianying Zhao, Mohammad Mannan
2019 J jnl
Towards a global perspective on web tracking.
Comput. Secur.
Nayanamana Samarasinghe, Mohammad Mannan
2018 B conf
Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials.
ARES
Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2018 J jnl
Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials.
CoRR
Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2018 B conf
On Understanding Permission Usage Contextuality in Android Apps.
DBSec
Md Zakir Hossen, Mohammad Mannan
2018 A* ed.
Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, CCS 2018, Toronto, ON, Canada, October 15-19, 2018
CCS
David Lie, Mohammad Mannan, Michael Backes, Xiaofeng Wang
2018 — ed.
Proceedings of the 2018 Workshop on Cyber-Physical Systems Security and PrivaCy, CPS-SPC@CCS 2018, Toronto, ON, Canada, October 19, 2018
CPS-SPC@CCS
David Lie, Mohammad Mannan
2018 — ed.
Proceedings of the 2018 Workshop on Privacy in the Electronic Society, WPES@CCS 2018, Toronto, ON, Canada, October 15-19, 2018
CCS
David Lie, Mohammad Mannan, Aaron Johnson
2018 C ed.
Proceedings of the New Security Paradigms Workshop, NSPW 2018, Windsor, UK, August 28-31, 2018
NSPW
Marco Carvalho, Matt Bishop, Anil Somayaji, Wolter Pieters, Mohammad Mannan
2018 A* conf
SafeKeeper: Protecting Web Passwords using Trusted Execution Environments.
WWW
Klaudia Krawiecka, Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2018 J jnl
Smart But Unsafe: Experimental Evaluation of Security and Privacy Practices in Smart Toys.
CoRR
Sharon Shasha, Moustafa Mahmoud, Mohammad Mannan, Amr M. Youssef
2018 J jnl
The Sorry State of TLS Security in Enterprise Interception Appliances.
CoRR
Louis Waked, Mohammad Mannan, Amr M. Youssef
2018 A conf
To Intercept or Not to Intercept: Analyzing TLS Interception in Network Appliances.
AsiaCCS
Louis Waked, Mohammad Mannan, Amr M. Youssef
2018 — conf
Using SafeKeeper to Protect Web Passwords.
WWW (Companion Volume)
Arseny Kurnikov, Klaudia Krawiecka, Andrew Paverd, Mohammad Mannan, N. Asokan
2017 J jnl
Protecting Web Passwords from Rogue Servers using Trusted Execution Environments.
CoRR
Klaudia Krawiecka, Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2017 — conf
Short Paper: TLS Ecosystems in Networked Devices vs. Web Servers.
Financial Cryptography
Nayanamana Samarasinghe, Mohammad Mannan
2017 — conf
Towards a comprehensive analytical framework for smart toy privacy practices.
STAST
Moustafa Mahmoud, Md Zakir Hossen, Hesham Barakat, Mohammad Mannan, Amr M. Youssef
2016 J jnl
An evaluation of recent secure deduplication proposals.
J. Inf. Secur. Appl.
Vladimir Rabotka, Mohammad Mannan
2016 J jnl
Deceptive Deletion Triggers Under Coercion.
IEEE Trans. Inf. Forensics Secur.
Lianying Zhao, Mohammad Mannan
2016 A* conf
Hypnoguard: Protecting Secrets across Sleep-wake Cycles.
CCS
Lianying Zhao, Mohammad Mannan
2016 A* conf
Killed by Proxy: Analyzing Client-end TLS Interception Software.
NDSS
Xavier de Carné de Carnavalet, Mohammad Mannan
2016 C ed.
Proceedings of the 2016 New Security Paradigms Workshop, NSPW 2016, Granby, Colorado, USA, September 26-29, 2016
NSPW
Carrie Gates, Rainer Böhme, Mohammad Mannan, Serge Egelman
2016 — ed.
Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM@CCS 2016, Vienna, Austria, October 24, 2016
SPSM@CCS
Long Lu, Mohammad Mannan
2016 A* conf
Sixth Annual ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM 2016).
CCS
Long Lu, Mohammad Mannan
2015 J jnl
A Large-Scale Evaluation of High-Impact Password Strength Meters.
ACM Trans. Inf. Syst. Secur.
Xavier de Carné de Carnavalet, Mohammad Mannan
2015 A* conf
Gracewipe: Secure and Verifiable Deletion under Coercion.
NDSS
Lianying Zhao, Mohammad Mannan
2015 C conf
Peace vs. Privacy: Leveraging Conflicting Jurisdictions for Email Security.
NSPW
Mohammad Mannan, Arash Shahkar, Atieh Saberi Pirouz, Vladimir Rabotka
2015 C ed.
Proceedings of the 2015 New Security Paradigms Workshop, NSPW 2015, Twente, The Netherlands, September 8-11, 2015
NSPW
Anil Somayaji, Paul C. van Oorschot, Mohammad Mannan, Rainer Böhme
2014 A conf
Challenges and implications of verifiable builds for security-critical open-source software.
ACSAC
Xavier de Carné de Carnavalet, Mohammad Mannan
2014 — conf
Detection of malicious payload distribution channels in DNS.
ICC
A. Mert Kara, Hamad Binsalleeh, Mohammad Mannan, Amr M. Youssef, Mourad Debbabi
2014 A* conf
From Very Weak to Very Strong: Analyzing Password-Strength Meters.
NDSS
Xavier de Carné de Carnavalet, Mohammad Mannan
2014 J jnl
Mobiflage: Deniable Storage Encryptionfor Mobile Devices.
IEEE Trans. Dependable Secur. Comput.
Adam Skillen, Mohammad Mannan
2013 C conf
Explicit authentication response considered harmful.
NSPW
Lianying Zhao, Mohammad Mannan
2013 A* conf
On Implementing Deniable Storage Encryption for Mobile Devices.
NDSS
Adam Skillen, Mohammad Mannan
2012 Misc conf
Lightweight Client-Side Methods for Detecting Email Forgery.
WISA
Eric Lin, John Aycock, Mohammad Mannan
2012 J jnl
Passwords for Both Mobile and Desktop Computers Appendix.
login Usenix Mag.
Mohammad Mannan, Paul C. van Oorschot
2012 J jnl
Passwords for Both Mobile and Desktop Computers: ObPwd for Firefox and Android.
login Usenix Mag.
Mohammad Mannan, Paul C. van Oorschot
2012 J jnl
Revisiting Defenses against Large-Scale Online Password Guessing Attacks.
IEEE Trans. Dependable Secur. Comput.
Mansour Alsaleh, Mohammad Mannan, Paul C. van Oorschot
2011 J jnl
Leveraging personal devices for stronger password authentication from untrusted computers.
J. Comput. Secur.
Mohammad Mannan, Paul C. van Oorschot
2011 — conf
Mercury: Recovering Forgotten Passwords Using Personal Devices.
Financial Cryptography
Mohammad Mannan, David Barrera, Carson D. Brown, David Lie, Paul C. van Oorschot
2011 A* conf
Unicorn: two-factor attestation for data security.
CCS
Mohammad Mannan, Beom Heyn Kim, Afshar Ganjali, David Lie
2011 J jnl
User Study, Analysis, and Usable Security of Passwords Based on Digital Objects.
IEEE Trans. Inf. Forensics Secur.
Robert Biddle, Mohammad Mannan, Paul C. van Oorschot, Tara Whalen
2009 J jnl
Reducing threats from flawed security APIs: The banking PIN case.
Comput. Secur.
Mohammad Mannan, Paul C. van Oorschot
2008 — conf
Digital Objects as Passwords.
HotSec
Mohammad Mannan, Paul C. van Oorschot
2008 C conf
Localization of credential information to address increasingly inevitable data breaches.
NSPW
Mohammad Mannan, Paul C. van Oorschot
2008 A* conf
Privacy-enhanced sharing of personal content on the web.
WWW
Mohammad Mannan, Paul C. van Oorschot
2008 — conf
Weighing Down "The Unbearable Lightness of PIN Cracking".
Financial Cryptography
Mohammad Mannan, Paul C. van Oorschot
2007 C conf
Security and usability: the gap in real-world online banking.
NSPW
Mohammad Mannan, Paul C. van Oorschot
2007 — conf
Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer.
Financial Cryptography
Mohammad Mannan, Paul C. van Oorschot
2006 — conf
A Protocol for Secure Public Instant Messaging.
Financial Cryptography
Mohammad Mannan, Paul C. van Oorschot
2005 — conf
On instant messaging worms, analysis and countermeasures.
WORM
Mohammad Mannan, Paul C. van Oorschot
2004 C conf
Secure Public Instant Messaging.
PST
Mohammad Mannan, Paul C. van Oorschot