Habiba Farrukh

Publications

See the full list of my publications on Google Scholar.

2025

• Virtual Reality, Real Problems: A Longitudinal Security Analysis of VR Firmware
  Vamsi Shankar Simhadri, Yichang Xiong, Habiba Farrukh, and Xiaokuan Zhang
  ACM Conference on Computer and Communications Security (CCS), 2025 [Paper]
  [BibTeX]

  @inproceedings{simhadri2025vr,
    title={Virtual Reality, Real Problems: A Longitudinal Security Analysis of VR Firmware},
    author={Simhadri, Vamsi Shankar and Xiong, Yichang and Farrukh, Habiba and Zhang, Xiaokuan},
    booktitle={ACM Conference on Computer and Communications Security (CCS)},
    year={2025}
  }

• Scoop: Mitigation of Recapture Attacks on Provenance-Based Media Authentication
  Yuxin (Myles) Liu, Habiba Farrukh, Ardalan Amiri Sani, Sharad Agarwal, and Gene Tsudik
  USENIX Security Symposium, 2025 [Paper]
  [BibTeX]

  @inproceedings{liu2025scoop,
    title={Scoop: Mitigation of Recapture Attacks on Provenance-Based Media Authentication},
    author={Liu, Yuxin and Farrukh, Habiba and Sani, Ardalan Amiri and Agarwal, Sharad and Tsudik, Gene},
    booktitle={USENIX Security Symposium},
    year={2025}
  }

• Shadowed Realities: An Investigation of UI Attacks in WebXR
  Chandrika Mukherjee, Reham Mohamed, Arjun Arunasalam, Habiba Farrukh, and Z. Berkay Celik
  USENIX Security Symposium, 2025 [Paper]
  [BibTeX]

  @inproceedings{mukherjee2025shadowed,
    title={Shadowed Realities: An Investigation of UI Attacks in WebXR},
    author={Mukherjee, Chandrika and Mohamed, Reham and Arunasalam, Arjun and Farrukh, Habiba and Celik, Z. Berkay},
    booktitle={USENIX Security Symposium},
    year={2025}
  }

  Best Paper Honorable Mention Award
• PeekXR: Understanding Privacy Leakages from Eye Gaze in Extended Reality
  Chuyang Peng, Mutahar Ali, and Habiba Farrukh
  ACM International Conference on Mobile Systems, Applications, and Services (MobiSys), 2025 [Paper]
  [BibTeX]

  @inproceedings{peng2025peekxr,
    title={PeekXR: Understanding Privacy Leakages from Eye Gaze in Extended Reality},
    author={Peng, Chuyang and Ali, Mutahar and Farrukh, Habiba},
    booktitle={ACM International Conference on Mobile Systems, Applications, and Services (MobiSys)},
    year={2025}
  }

  Best Poster Runner-up Award
• UI Based Attacks in WebXR
  Chandrika Mukherjee, Reham Mohamed Aburas, Arjun Arunasalam, Habiba Farrukh, and Z. Berkay Celik
  ACM International Conference on Mobile Systems, Applications, and Services (MobiSys), 2025 [Paper]
  [BibTeX]

  @inproceedings{mukherjee2025ui,
    title={UI Based Attacks in WebXR},
    author={Mukherjee, Chandrika and Aburas, Reham Mohamed and Arunasalam, Arjun and Farrukh, Habiba and Celik, Z. Berkay},
    booktitle={ACM International Conference on Mobile Systems, Applications, and Services (MobiSys)},
    pages={639--640},
    year={2025}
  }

• Understanding Users' Security and Privacy Concerns and Attitudes Towards Conversational AI Platforms
  Mutahar Ali, Arjun Arunasalam, and Habiba Farrukh
  IEEE Security and Privacy (S&P), 2025 [Paper]
  [BibTeX]

  @inproceedings{ali2025understanding,
    title={Understanding Users' Security and Privacy Concerns and Attitudes Towards Conversational AI Platforms},
    author={Ali, Mutahar and Arunasalam, Arjun and Farrukh, Habiba},
    booktitle={IEEE Symposium on Security and Privacy (S\&P)},
    year={2025}
  }

• Towards Secure User Interaction in WebXR
  Chandrika Mukherjee, Arjun Arunasalam, Habiba Farrukh, Reham Mohamed Aburas, and Z. Berkay Celik
  International Workshop on Human-Centered Sensing, Modeling, and Intelligent Systems (HumanSys), 2025 [Paper]
  [BibTeX]

  @inproceedings{mukherjee2025towards,
    title={Towards Secure User Interaction in WebXR},
    author={Mukherjee, Chandrika and Arunasalam, Arjun and Farrukh, Habiba and Aburas, Reham Mohamed and Celik, Z. Berkay},
    booktitle={International Workshop on Human-Centered Sensing, Modeling, and Intelligent Systems (HumanSys)},
    pages={76--79},
    year={2025}
  }

• Intermittent Power, Continuous Protection: Security and Privacy for Batteryless Devices in IoT
  Thea U. Kjeldsmark, Hui Zhuang, Habiba Farrukh, and Muslum Ozgur Ozmen
  International Workshop on Security and Privacy of Sensing Systems, 2025 [Paper]
  [BibTeX]

  @inproceedings{kjeldsmark2025intermittent,
    title={Intermittent Power, Continuous Protection: Security and Privacy for Batteryless Devices in IoT},
    author={Kjeldsmark, Thea U. and Zhuang, Hui and Farrukh, Habiba and Ozmen, Muslum Ozgur},
    booktitle={International Workshop on Security and Privacy of Sensing Systems},
    pages={6--11},
    year={2025}
  }

• Deceptive Sound Therapy on Online Platforms: Do Mental Wellbeing Tracks Conform to User Expectations?
  Arjun Arunasalam, Jason Tong, Habiba Farrukh, Muslum Ozgur Ozmen, Koustuv Saha, and Z. Berkay Celik
  International AAAI Conference on Web and Social Media (ICWSM), 2025 [Paper]
  [BibTeX]

  @inproceedings{arunasalam2025deceptive,
    title={Deceptive Sound Therapy on Online Platforms: Do Mental Wellbeing Tracks Conform to User Expectations?},
    author={Arunasalam, Arjun and Tong, Jason and Farrukh, Habiba and Ozmen, Muslum Ozgur and Saha, Koustuv and Celik, Z. Berkay},
    booktitle={International AAAI Conference on Web and Social Media (ICWSM)},
    year={2025}
  }

2024

• PrivacySphere: Privacy-Preserving Smart Spaces
  Habiba Farrukh, Nada Lahjouji, Sharad Mehrotra, Faisal Nawab, Julie Rousseau, Shantanu Sharma, Nalini Venkatasubramanian, and Roberto Yus
  IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA), 2024 [Paper]
  [BibTeX]

  @inproceedings{farrukh2024privacysphere,
    title={PrivacySphere: Privacy-Preserving Smart Spaces},
    author={Farrukh, Habiba and Lahjouji, Nada and Mehrotra, Sharad and Nawab, Faisal and Rousseau, Julie and Sharma, Shantanu and Venkatasubramanian, Nalini and Yus, Roberto},
    booktitle={IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)},
    year={2024}
  }

• Expectation Conformance in Online Sound Therapy: Designing Tools for Users of Mental Wellbeing Applications
  Arjun Arunasalam, Jason Tong, Habiba Farrukh, Muslum Ozgur Ozmen, Koustuv Saha, and Z. Berkay Celik
  Companion Publication of the Computer Supported Cooperative Work and Social Computing (CSCW), 2024 [Paper]
  [BibTeX]

  @inproceedings{arunasalam2024expectation,
    title={Expectation Conformance in Online Sound Therapy: Designing Tools for Users of Mental Wellbeing Applications},
    author={Arunasalam, Arjun and Tong, Jason and Farrukh, Habiba and Ozmen, Muslum Ozgur and Saha, Koustuv and Celik, Z. Berkay},
    booktitle={Companion Publication of the Computer Supported Cooperative Work and Social Computing (CSCW)},
    year={2024}
  }

• Physical Side-Channel Attacks against Intermittent Devices
  Muslum Ozgur Ozmen, Habiba Farrukh, and Z. Berkay Celik
  Privacy Enhancing Technologies (PoPETs), 2024 [Paper]
  [BibTeX]

  @article{ozmen2024physical,
    title={Physical Side-Channel Attacks against Intermittent Devices},
    author={Ozmen, Muslum Ozgur and Farrukh, Habiba and Celik, Z. Berkay},
    journal={Proceedings on Privacy Enhancing Technologies (PoPETs)},
    year={2024}
  }

• Understanding the Security and Privacy Implications of Online Toxic Content on Refugees
  Arjun Arunasalam^*, Habiba Farrukh^*, Eliz Tekcan^*, and Z. Berkay Celik
  USENIX Security Symposium, 2024 [Paper]
  [BibTeX]

  @inproceedings{arunasalam2024understanding,
    title={Understanding the Security and Privacy Implications of Online Toxic Content on Refugees},
    author={Arunasalam, Arjun and Farrukh, Habiba and Tekcan, Eliz and Celik, Z. Berkay},
    booktitle={USENIX Security Symposium},
    year={2024}
  }

• ATTention Please! An investigation of the App Tracking Transparency Permission
  Reham Mohamed, Arjun Arunasalam, Habiba Farrukh, Jason Tong, Antonio Bianchi, and Z. Berkay Celik
  USENIX Security Symposium, 2024 [Paper]
  [BibTeX]

  @inproceedings{mohamed2024attention,
    title={ATTention Please! An Investigation of the App Tracking Transparency Permission},
    author={Mohamed, Reham and Arunasalam, Arjun and Farrukh, Habiba and Tong, Jason and Bianchi, Antonio and Celik, Z. Berkay},
    booktitle={USENIX Security Symposium},
    year={2024}
  }

• Wear's my Data? Understanding the Cross-Device Runtime Permission Model in Wearables
  Doguhan Yeke, Muhammad Ibrahim, Güliz Seray Tuncay, Habiba Farrukh, Abdullah Imran, Antonio Bianchi, and Z. Berkay Celik
  IEEE Security and Privacy (S&P), 2024 [Paper]
  [BibTeX]

  @inproceedings{yeke2024wears,
    title={Wear's my Data? Understanding the Cross-Device Runtime Permission Model in Wearables},
    author={Yeke, Doguhan and Ibrahim, Muhammad and Tuncay, G{\"u}liz Seray and Farrukh, Habiba and Imran, Abdullah and Bianchi, Antonio and Celik, Z. Berkay},
    booktitle={IEEE Symposium on Security and Privacy (S\&P)},
    year={2024}
  }

• The Dark Side of E-Commerce: Dropshipping Abuse as a Business Model
  Arjun Arunasalam, Andrew Chu, Muslum Ozgur Ozmen, Habiba Farrukh, and Z. Berkay Celik
  ISOC Network and Distributed System Security Symposium (NDSS), 2024 [Paper]
  [BibTeX]

  @inproceedings{arunasalam2024dark,
    title={The Dark Side of E-Commerce: Dropshipping Abuse as a Business Model},
    author={Arunasalam, Arjun and Chu, Andrew and Ozmen, Muslum Ozgur and Farrukh, Habiba and Celik, Z. Berkay},
    booktitle={ISOC Network and Distributed System Security Symposium (NDSS)},
    year={2024}
  }

• An Exploration of Online Toxic Content Against Refugees
  Arjun Arunasalam^*, Habiba Farrukh^*, Eliz Tekcan^*, and Z. Berkay Celik
  Symposium on Usable Security and Privacy (USEC), 2024 [Paper]
  [BibTeX]

  @inproceedings{arunasalam2024exploration,
    title={An Exploration of Online Toxic Content Against Refugees},
    author={Arunasalam, Arjun and Farrukh, Habiba and Tekcan, Eliz and Celik, Z. Berkay},
    booktitle={Symposium on Usable Security and Privacy (USEC)},
    year={2024}
  }

2023

• LocIn: Inferring Semantic Location from Spatial Maps in Mixed Reality
  Habiba Farrukh, Reham Mohamed, Aniket Nare, Antonio Bianchi, and Z. Berkay Celik
  USENIX Security Symposium, 2023 [Paper]
  [BibTeX]

  @inproceedings{farrukh2023locin,
    title={LocIn: Inferring Semantic Location from Spatial Maps in Mixed Reality},
    author={Farrukh, Habiba and Mohamed, Reham and Nare, Aniket and Bianchi, Antonio and Celik, Z. Berkay},
    booktitle={USENIX Security Symposium},
    year={2023}
  }

• Rethinking Secure Pairing in Drone Swarms
  Muslum Ozgur Ozmen^*, Habiba Farrukh^*, Hyungsub Kim, Antonio Bianchi, and Z. Berkay Celik
  ISOC Symposium on Vehicle Security and Privacy (VehicleSec), 2023 [Paper]
  [BibTeX]

  @inproceedings{ozmen2023rethinking,
    title={Rethinking Secure Pairing in Drone Swarms},
    author={Ozmen, Muslum Ozgur and Farrukh, Habiba and Kim, Hyungsub and Bianchi, Antonio and Celik, Z. Berkay},
    booktitle={ISOC Symposium on Vehicle Security and Privacy (VehicleSec)},
    year={2023}
  }

• One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices
  Habiba Farrukh^*, Muslum Ozgur Ozmen^*, Faik Kerem Ors, and Z. Berkay Celik
  IEEE Security and Privacy (S&P), 2023 [Paper]
  [BibTeX]

  @inproceedings{farrukh2023onekey,
    title={One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices},
    author={Farrukh, Habiba and Ozmen, Muslum Ozgur and Ors, Faik Kerem and Celik, Z. Berkay},
    booktitle={IEEE Symposium on Security and Privacy (S\&P)},
    year={2023}
  }

• iStelan: Disclosing Sensitive User Information by Mobile Magnetometer from Finger Touches
  Reham Mohamed, Habiba Farrukh, He Wang, Yidong Lu, and Z. Berkay Celik
  Privacy Enhancing Technologies (PoPETs), 2023 [Paper]
  [BibTeX]

  @article{mohamed2023istelan,
    title={iStelan: Disclosing Sensitive User Information by Mobile Magnetometer from Finger Touches},
    author={Mohamed, Reham and Farrukh, Habiba and Wang, He and Lu, Yidong and Celik, Z. Berkay},
    journal={Proceedings on Privacy Enhancing Technologies (PoPETs)},
    year={2023}
  }

• Evasion Attacks on Smart Home Physical Event Verification and Defenses
  Muslum Ozgur Ozmen, Ruoyu Song, Habiba Farrukh, and Z. Berkay Celik
  ISOC Network and Distributed System Security Symposium (NDSS), 2023 [Paper]
  [BibTeX]

  @inproceedings{ozmen2023evasion,
    title={Evasion Attacks on Smart Home Physical Event Verification and Defenses},
    author={Ozmen, Muslum Ozgur and Song, Ruoyu and Farrukh, Habiba and Celik, Z. Berkay},
    booktitle={ISOC Network and Distributed System Security Symposium (NDSS)},
    year={2023}
  }

2022

• SARA: Secure Android Remote Authorization
  Abdullah Imran, Habiba Farrukh, Muhammad Ibrahim, Z. Berkay Celik, and Antonio Bianchi
  USENIX Security Symposium, 2022 [Paper]
  [BibTeX]

  @inproceedings{imran2022sara,
    title={SARA: Secure Android Remote Authorization},
    author={Imran, Abdullah and Farrukh, Habiba and Ibrahim, Muhammad and Celik, Z. Berkay and Bianchi, Antonio},
    booktitle={USENIX Security Symposium},
    year={2022}
  }

2021

• New Metrics to Evaluate the Performance and Fairness of Personalized Federated Learning
  Siddharth Divi, Yi-Shan Lin, Habiba Farrukh, and Z. Berkay Celik
  International Workshop on Federated Learning for User Privacy and Data Confidentiality (FL-ICML), 2021 [Paper]
  [BibTeX]

  @inproceedings{divi2021new,
    title={New Metrics to Evaluate the Performance and Fairness of Personalized Federated Learning},
    author={Divi, Siddharth and Lin, Yi-Shan and Farrukh, Habiba and Celik, Z. Berkay},
    booktitle={International Workshop on Federated Learning for User Privacy and Data Confidentiality (FL-ICML)},
    year={2021}
  }

• S³: Side-Channel Attack on Stylus Pencils through Sensors
  Habiba Farrukh, Tinghan Yang, Hanwen Xu, Yuxuan Yin, He Wang, and Z. Berkay Celik
  Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT/UbiComp), 2021 [Paper]
  [BibTeX]

  @article{farrukh2021s3,
    title={S3: Side-Channel Attack on Stylus Pencils through Sensors},
    author={Farrukh, Habiba and Yang, Tinghan and Xu, Hanwen and Yin, Yuxuan and Wang, He and Celik, Z. Berkay},
    journal={Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT)},
    year={2021}
  }

2020

• FaceRevelio: A Face Liveness Detection System for Smartphones with a Single Front Camera
  Habiba Farrukh, Reham Mohamed Aburas, Siyuan Cao, and He Wang
  ACM International Conference on Mobile Computing and Networking (MobiCom), 2020 [Paper] [Video] [Slides]
  [BibTeX]

  @inproceedings{farrukh2020facerevelio,
    title={FaceRevelio: A Face Liveness Detection System for Smartphones with a Single Front Camera},
    author={Farrukh, Habiba and Aburas, Reham Mohamed and Cao, Siyuan and Wang, He},
    booktitle={ACM International Conference on Mobile Computing and Networking (MobiCom)},
    year={2020}
  }

• Towards Context Address for Camera-to-Human Communication
  Siyuan Cao, Habiba Farrukh, and He Wang
  IEEE International Conference on Computer Communications (INFOCOM), 2020 [Paper]
  [BibTeX]

  @inproceedings{cao2020towards,
    title={Towards Context Address for Camera-to-Human Communication},
    author={Cao, Siyuan and Farrukh, Habiba and Wang, He},
    booktitle={IEEE International Conference on Computer Communications (INFOCOM)},
    year={2020}
  }

2018

• Demo: Enabling Public Cameras to Talk to the Public
  Siyuan Cao, Habiba Farrukh, and He Wang
  ACM International Conference on Mobile Systems, Applications, and Services (MobiSys), 2018 [Abstract] [Video]
  [BibTeX]

  @inproceedings{cao2018demo,
    title={Demo: Enabling Public Cameras to Talk to the Public},
    author={Cao, Siyuan and Farrukh, Habiba and Wang, He},
    booktitle={ACM International Conference on Mobile Systems, Applications, and Services (MobiSys)},
    year={2018}
  }