See the full list of my publications on Google Scholar.
@inproceedings{simhadri2025vr,
title={Virtual Reality, Real Problems: A Longitudinal Security Analysis of VR Firmware},
author={Simhadri, Vamsi Shankar and Xiong, Yichang and Farrukh, Habiba and Zhang, Xiaokuan},
booktitle={ACM Conference on Computer and Communications Security (CCS)},
year={2025}
}@inproceedings{liu2025scoop,
title={Scoop: Mitigation of Recapture Attacks on Provenance-Based Media Authentication},
author={Liu, Yuxin and Farrukh, Habiba and Sani, Ardalan Amiri and Agarwal, Sharad and Tsudik, Gene},
booktitle={USENIX Security Symposium},
year={2025}
}@inproceedings{mukherjee2025shadowed,
title={Shadowed Realities: An Investigation of UI Attacks in WebXR},
author={Mukherjee, Chandrika and Mohamed, Reham and Arunasalam, Arjun and Farrukh, Habiba and Celik, Z. Berkay},
booktitle={USENIX Security Symposium},
year={2025}
}@inproceedings{peng2025peekxr,
title={PeekXR: Understanding Privacy Leakages from Eye Gaze in Extended Reality},
author={Peng, Chuyang and Ali, Mutahar and Farrukh, Habiba},
booktitle={ACM International Conference on Mobile Systems, Applications, and Services (MobiSys)},
year={2025}
}@inproceedings{mukherjee2025ui,
title={UI Based Attacks in WebXR},
author={Mukherjee, Chandrika and Aburas, Reham Mohamed and Arunasalam, Arjun and Farrukh, Habiba and Celik, Z. Berkay},
booktitle={ACM International Conference on Mobile Systems, Applications, and Services (MobiSys)},
pages={639--640},
year={2025}
}@inproceedings{ali2025understanding,
title={Understanding Users' Security and Privacy Concerns and Attitudes Towards Conversational AI Platforms},
author={Ali, Mutahar and Arunasalam, Arjun and Farrukh, Habiba},
booktitle={IEEE Symposium on Security and Privacy (S\&P)},
year={2025}
}@inproceedings{mukherjee2025towards,
title={Towards Secure User Interaction in WebXR},
author={Mukherjee, Chandrika and Arunasalam, Arjun and Farrukh, Habiba and Aburas, Reham Mohamed and Celik, Z. Berkay},
booktitle={International Workshop on Human-Centered Sensing, Modeling, and Intelligent Systems (HumanSys)},
pages={76--79},
year={2025}
}@inproceedings{kjeldsmark2025intermittent,
title={Intermittent Power, Continuous Protection: Security and Privacy for Batteryless Devices in IoT},
author={Kjeldsmark, Thea U. and Zhuang, Hui and Farrukh, Habiba and Ozmen, Muslum Ozgur},
booktitle={International Workshop on Security and Privacy of Sensing Systems},
pages={6--11},
year={2025}
}@inproceedings{arunasalam2025deceptive,
title={Deceptive Sound Therapy on Online Platforms: Do Mental Wellbeing Tracks Conform to User Expectations?},
author={Arunasalam, Arjun and Tong, Jason and Farrukh, Habiba and Ozmen, Muslum Ozgur and Saha, Koustuv and Celik, Z. Berkay},
booktitle={International AAAI Conference on Web and Social Media (ICWSM)},
year={2025}
}@inproceedings{farrukh2024privacysphere,
title={PrivacySphere: Privacy-Preserving Smart Spaces},
author={Farrukh, Habiba and Lahjouji, Nada and Mehrotra, Sharad and Nawab, Faisal and Rousseau, Julie and Sharma, Shantanu and Venkatasubramanian, Nalini and Yus, Roberto},
booktitle={IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)},
year={2024}
}@inproceedings{arunasalam2024expectation,
title={Expectation Conformance in Online Sound Therapy: Designing Tools for Users of Mental Wellbeing Applications},
author={Arunasalam, Arjun and Tong, Jason and Farrukh, Habiba and Ozmen, Muslum Ozgur and Saha, Koustuv and Celik, Z. Berkay},
booktitle={Companion Publication of the Computer Supported Cooperative Work and Social Computing (CSCW)},
year={2024}
}@article{ozmen2024physical,
title={Physical Side-Channel Attacks against Intermittent Devices},
author={Ozmen, Muslum Ozgur and Farrukh, Habiba and Celik, Z. Berkay},
journal={Proceedings on Privacy Enhancing Technologies (PoPETs)},
year={2024}
}@inproceedings{arunasalam2024understanding,
title={Understanding the Security and Privacy Implications of Online Toxic Content on Refugees},
author={Arunasalam, Arjun and Farrukh, Habiba and Tekcan, Eliz and Celik, Z. Berkay},
booktitle={USENIX Security Symposium},
year={2024}
}@inproceedings{mohamed2024attention,
title={ATTention Please! An Investigation of the App Tracking Transparency Permission},
author={Mohamed, Reham and Arunasalam, Arjun and Farrukh, Habiba and Tong, Jason and Bianchi, Antonio and Celik, Z. Berkay},
booktitle={USENIX Security Symposium},
year={2024}
}@inproceedings{yeke2024wears,
title={Wear's my Data? Understanding the Cross-Device Runtime Permission Model in Wearables},
author={Yeke, Doguhan and Ibrahim, Muhammad and Tuncay, G{\"u}liz Seray and Farrukh, Habiba and Imran, Abdullah and Bianchi, Antonio and Celik, Z. Berkay},
booktitle={IEEE Symposium on Security and Privacy (S\&P)},
year={2024}
}@inproceedings{arunasalam2024dark,
title={The Dark Side of E-Commerce: Dropshipping Abuse as a Business Model},
author={Arunasalam, Arjun and Chu, Andrew and Ozmen, Muslum Ozgur and Farrukh, Habiba and Celik, Z. Berkay},
booktitle={ISOC Network and Distributed System Security Symposium (NDSS)},
year={2024}
}@inproceedings{arunasalam2024exploration,
title={An Exploration of Online Toxic Content Against Refugees},
author={Arunasalam, Arjun and Farrukh, Habiba and Tekcan, Eliz and Celik, Z. Berkay},
booktitle={Symposium on Usable Security and Privacy (USEC)},
year={2024}
}@inproceedings{farrukh2023locin,
title={LocIn: Inferring Semantic Location from Spatial Maps in Mixed Reality},
author={Farrukh, Habiba and Mohamed, Reham and Nare, Aniket and Bianchi, Antonio and Celik, Z. Berkay},
booktitle={USENIX Security Symposium},
year={2023}
}@inproceedings{ozmen2023rethinking,
title={Rethinking Secure Pairing in Drone Swarms},
author={Ozmen, Muslum Ozgur and Farrukh, Habiba and Kim, Hyungsub and Bianchi, Antonio and Celik, Z. Berkay},
booktitle={ISOC Symposium on Vehicle Security and Privacy (VehicleSec)},
year={2023}
}@inproceedings{farrukh2023onekey,
title={One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices},
author={Farrukh, Habiba and Ozmen, Muslum Ozgur and Ors, Faik Kerem and Celik, Z. Berkay},
booktitle={IEEE Symposium on Security and Privacy (S\&P)},
year={2023}
}@article{mohamed2023istelan,
title={iStelan: Disclosing Sensitive User Information by Mobile Magnetometer from Finger Touches},
author={Mohamed, Reham and Farrukh, Habiba and Wang, He and Lu, Yidong and Celik, Z. Berkay},
journal={Proceedings on Privacy Enhancing Technologies (PoPETs)},
year={2023}
}@inproceedings{ozmen2023evasion,
title={Evasion Attacks on Smart Home Physical Event Verification and Defenses},
author={Ozmen, Muslum Ozgur and Song, Ruoyu and Farrukh, Habiba and Celik, Z. Berkay},
booktitle={ISOC Network and Distributed System Security Symposium (NDSS)},
year={2023}
}@inproceedings{imran2022sara,
title={SARA: Secure Android Remote Authorization},
author={Imran, Abdullah and Farrukh, Habiba and Ibrahim, Muhammad and Celik, Z. Berkay and Bianchi, Antonio},
booktitle={USENIX Security Symposium},
year={2022}
}@inproceedings{divi2021new,
title={New Metrics to Evaluate the Performance and Fairness of Personalized Federated Learning},
author={Divi, Siddharth and Lin, Yi-Shan and Farrukh, Habiba and Celik, Z. Berkay},
booktitle={International Workshop on Federated Learning for User Privacy and Data Confidentiality (FL-ICML)},
year={2021}
}@article{farrukh2021s3,
title={S3: Side-Channel Attack on Stylus Pencils through Sensors},
author={Farrukh, Habiba and Yang, Tinghan and Xu, Hanwen and Yin, Yuxuan and Wang, He and Celik, Z. Berkay},
journal={Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT)},
year={2021}
}@inproceedings{farrukh2020facerevelio,
title={FaceRevelio: A Face Liveness Detection System for Smartphones with a Single Front Camera},
author={Farrukh, Habiba and Aburas, Reham Mohamed and Cao, Siyuan and Wang, He},
booktitle={ACM International Conference on Mobile Computing and Networking (MobiCom)},
year={2020}
}@inproceedings{cao2020towards,
title={Towards Context Address for Camera-to-Human Communication},
author={Cao, Siyuan and Farrukh, Habiba and Wang, He},
booktitle={IEEE International Conference on Computer Communications (INFOCOM)},
year={2020}
}@inproceedings{cao2018demo,
title={Demo: Enabling Public Cameras to Talk to the Public},
author={Cao, Siyuan and Farrukh, Habiba and Wang, He},
booktitle={ACM International Conference on Mobile Systems, Applications, and Services (MobiSys)},
year={2018}
}