William Melicher

Publications
Influence

Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks

William Melicher, B. Ur, Saranga Komanduri, L. Bauer, N. Christin, L. Cranor
Computer Science
USENIX Annual Technical Conference
10 August 2016

We propose using artificial neural networks to model text passwords' resistance to guessing attacks and explore how different architectures and training methods impact neural networks' guessing effectiveness. Expand

Measuring Real-World Accuracies and Biases in Modeling Password Guessability

B. Ur, Sean M. Segreti, +7 authors R. Shay
Computer Science
USENIX Security Symposium
12 August 2015

We investigate how cracking approaches often used by researchers compare to real-world cracking by professionals, as well as how the choice of approach biases research conclusions. Expand

Usability and Security of Text Passwords on Mobile Devices

William Melicher, D. Kurilova, +7 authors Michelle L. Mazurek
Computer Science
CHI
7 May 2016

We compare the strength and usability of passwords created on mobile devices with those created and used on desktops, while varying password policy requirements and input methods. Expand

Design and Evaluation of a Data-Driven Password Meter

B. Ur, F. Alfieri, +9 authors William Melicher
Computer Science
CHI
2 May 2017

We describe the development and evaluation of a data-driven password meter that provides accurate strength measurement and actionable, detailed feedback to users. Expand

Riding out DOMsday: Towards Detecting and Preventing DOM Cross-Site Scripting

William Melicher, A. Das, Mahmood Sharif, L. Bauer, Limin Jia
Computer Science
NDSS
2018

We measure the prevalence of DOM XSS vulnerabilities, evaluate and inform the design of static-analysis tools, and assess the viability of other methods for preventing DOMXSS vulnerabilities. Expand

A Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior

R. Shay, L. Bauer, +7 authors B. Ur
Computer Science
CHI
18 April 2015

This paper examines how feedback and guidance affect password security and usability. Expand

(Do Not) Track Me Sometimes: Users’ Contextual Preferences for Web Tracking

William Melicher, Mahmood Sharif, Joshua Tan, L. Bauer, Mihai Christodorescu, P. Leon
Computer Science
Proc. Priv. Enhancing Technol.
1 April 2016

We report on the first detailed study of the perceived benefits and risks of tracking-and the reasons behind them-conducted in the context of users’ own browsing histories. Expand

A comparison of users' perceptions of and willingness to use Google, Facebook, and Google+ single-sign-on functionality

L. Bauer, Cristian Bravo-Lillo, Elli Fragkaki, William Melicher
Computer Science, Business
Digital Identity Management
8 November 2013

Identity providers such as Google and Facebook are increasingly used to sign in to third-party services like Flickr and USA Today. Expand

Diversify to Survive: Making Passwords Stronger with Adaptive Policies

Sean M. Segreti, William Melicher, +7 authors Michelle L. Mazurek
Computer Science
SOUPS
12 July 2017

In this paper, we investigate the usability and security of adaptive password-composition policies, which dynamically change password requirements over time as users create new passwords. Expand

Towards Privacy-Aware Smart Buildings: Capturing, Communicating, and Enforcing Privacy Policies and Preferences

Primal Pappachan, Martin Degeling, +10 authors N. Venkatasubramanian
Computer Science
IEEE 37th International Conference on Distributed…
5 June 2017

We introduce a framework where IoT Assistants capture and manage the privacy preferences of their users and communicate them to privacy-aware smart buildings, which enforce them when collecting user data or sharing it with building services. Expand

Recommended Authors