Publications

(2026). On Optimal Information-Theoretic Security in Symmetric Encryption under Low-Entropy Keys. IACR ePrint 2026/646.

PDF Cite ePrint page

(2025). Personalized Password Guessing via Modeling Multiple Leaked Credentials of the Same User. In ESORICS 2025.

PDF Cite DOI Springer page

(2025). Practically Secure Honey Password Vaults: New Design and New Evaluation against Online Guessing. In USENIX Security 2025.

PDF Cite USENIX page Artifact

(2021). Incrementally Updateable Honey Password Vaults. In USENIX Security 2021.

Cite Slides Video PDF: Full version PDF: Conference version

(2021). Improved Probabilistic Context-Free Grammars for Passwords Using Word Extraction. In ICASSP 2021.

PDF Cite Poster Slides

(2021). Practical Threshold Multi-Factor Authentication. In IEEE TIFS.

PDF Cite

(2019). Probability Model Transforming Encoders Against Encoding Attacks. In USENIX Security 2019.

PDF Cite Slides Video

(2018). A Security Analysis of Honeywords. In NDSS 2018.

PDF Cite Slides Video

(2017). Zipf’s Law in Passwords. In TIFS.

PDF Cite

(2016). fuzzyPSM: A New Password Strength Meter Using Fuzzy Probabilistic Context-Free Grammars. In DSN 2016.

PDF Cite