CHORUS Lab

Carleton's Human Oriented Research in Usable Security Lab

 

Journal Articles

  1. K. Chaudhry, H. Assal, S. Chiasson (2026). E-proctoring perspectives: A Student–Instructor Comparative Analysis through the lens of Networked Privacy. ACM Transactions on Computer-Human Interaction, p. 1-46, https://doi.org/10.1145/384376.
  2. S. Maqsood, S. Chiasson (2026). Reflection and insight into co-creating a digital literacy game with a non-academic partner: A case report. International Journal of Human-Computer Interaction (IJHCI), https://doi.org/10.1080/10447318.2026.2716578.
  3. M. Keleher, K. Baig, S. Chiasson (2026) . The Privacy Triad: The Relationship Between Privacy Attitudes and Computers Are Social Actors. International Journal of Human Computer Studies (IJHCS), vol 10, March, Elsevier, p. 1-19, https://doi.org/10.1016/j.ijhcs.2026.103752
  4. H. Assal, S.G. Morkonda, M.Z. Arif, S. Chiasson (2025). Software security in practice: knowledge and motivation. Journal of Cybersecurity, Oxford University Press, https://doi.org/10.1093/cybsec/tyaf005
  5. S.G. Morkonda, S. Chiasson, P.C. van Oorschot (2024).“Sign in with … Privacy”: Timely Disclosure of Privacy Differences among Web SSO Login Options. Transactions on Privacy and Security (TOPS), ACM, https://doi.org/10.1145/3711898
  6. S.G. Morkonda, S. Chiasson, P.C. van Oorschot (2024). Influences of Displaying Permission-related Information On Web Single Sign-On Login Decisions. Computers & Security (COSE), April, Elsevier, https://doi.org/10.1016/j.cose.2023.103666
  7. J. Rocheleau, S. Chiasson (2021). Privacy and Safety on Social Networking Sites: Autistic and Non-Autistic Teenagers’ Attitudes and Behaviors. ACM Transactions on Computer Human Interaction (TOCHI), https://doi.org/10.1145/3469859 
  8. S. Maqsood, S. Chiasson (2021). The design, development, and evaluation of a cybersecurity and privacy game for tweens. ACM Transactions on Privacy & Security (TOPS), https://doi.org/10.1145/3469821
  9. M. Hull, L. Zhang-Kennedy, K. Baig, S. Chiasson (2021). Understanding Individual Differences: Factors Affecting Secure Computer Behaviour. Behaviour & Information Technology (TBIT), https://doi.org/10.1080/0144929X.2021.1977849
  10. L. Zhang-Kennedy, S. Chiasson (2021). A Systematic Review of Multimedia Tools for Cybersecurity Awareness and Education. ACM Computing Surveys (CSUR), 54(1), p. 1–39, https://doi.org/10.1145/3427920
  11. H. Assal, A. Imran, S. Chiasson (2018). An Exploration of Graphical Password Authentication for Children. International Journal of Child-Computer Interaction, November, Elsevier, https://doi.org/10.1016/j.ijcci.2018.06.003
  12. F. Lalonde Levesque, S. Chiasson, A. Somayaji, J.M. Fernandez (2018). Technological and Human Factors of Malware Attacks: A Computer Security Clinical Trial approach. Transactions on Privacy and Security (TOPS), July, ACM, https://doi.org/10.1145/3210311
  13. L. Zhang-Kennedy, Y. Abdelaziz, S. Chiasson (2017). Cyberheroes: The Design and Evaluation of an Interactive Ebook to Educate Children about Online Privacy. International Journal of Child-Computer Interaction, Elsevier, July, 13(1), p. 10-18, https://doi.org/10.1016/j.ijcci.2017.05.001
  14. F. Chanchary, Y. Abdelaziz, S. Chiasson (2018). Privacy Concerns Amidst OBA and the Need for Alternative Models. IEEE Internet Computing 22(2), p. 52-61, https://doi.org/10.1109/MIC.2017.3301625
  15. S. Maqsood, S. Chiasson, A. Girouard (2016). Bend Passwords: Using Gestures to Authenticate on Flexible Devices. Personal and Ubiquitous Computing, Springer, 20(4), p. 573-600, https://doi.org/10.1007/s00779-016-0928-6
  16. L. Zhang-Kennedy, S. Chiasson, and R. Biddle (2016). The Role of Instructional Design in Persuasion: A Comics Approach for Improving Cyber Security. International Journal of Human-Computer Interaction, Taylor & Francis, 32(3), p. 215-257, https://doi.org/10.1080/10447318.2016.1136177
  17. A. Forget, S. Chiasson, and R. Biddle (2015). User-centred authentication feature framework. Journal of Information Management and Computer Security, 23(5), p. 497 – 515, https://doi.org/10.1108/ICS-08-2014-0058
  18. S. Chiasson and P. C. van Oorschot (2015). Quantifying the security advantage of password expiration policies. Quantifying the security advantage of password expiration policies. Designs, Codes and Cryptography (DESI), 77(2), p. 401-408, https://doi.org/10.1007/s10623-015-0071-9
  19. M. Alsharnouby, F. Alaca, and S. Chiasson (2015). Why phishing still works: User strategies for combating phishing attacks. International Journal of Human-Computer Studies (Elsevier), 82:69 – 82, https://doi.org/10.1016/j.ijhcs.2015.05.005
  20. Y. Xu, G. Reynaga, S. Chiasson, J.-M. Frahm, F. Monrose, P.C. van Oorschot (2014). Security Analysis and Related Usability of Motion-based CAPTCHAs: Decoding Codewords in Motion. IEEE Trans. on Dependable and Secure Computing, Sept/Oct, 11(5), p. 480 – 493, https://doi.org/10.1109/TDSC.2013.52
  21. S. Chiasson, E. Stobert, A. Forget, R. Biddle (2012). Persuasive Cued Click-Points: Design and Evaluation. Persuasive Cued Click-Points: Design and Evaluation. IEEE Trans. on Dependable & Secure Computing (TDSC), Mar/Apr, p. 222-235, https://doi.org/10.1109/TDSC.2011.55
  22. R. Biddle, S. Chiasson, P.C. van Oorschot (2011). Graphical Passwords: Learning from the First Twelve Years. ACM Computing Surveys 44(4), p. 19:1–19:41, https://doi.org/10.1145/2333112.2333114
  23. S. Chiasson, A. Forget, R. Biddle, P.C. van Oorschot (2009). User interface design affects security: Patterns in click-based graphical passwords. (2009) International Journal of Information Security 8(5), p. 387-398, https://doi.org/10.1007/s10207-009-0080-7

Conference Papers

  1. M.Z. Arif, A.S. Wani, A. Chowdhury, S. Maqsood, S. Chiasson (2026). Understanding Deception: A qualitative study of children’s interactions with deceptive design in digital games. ACM Interaction Design and Children Conference (IDC), https://doi.org/10.1145/3773077.3806137 *Honourable Mention Award
  2. M. Keleher, D. Barrera, S. Chiasson (2024). Balancing Security and Longevity: Benefits of Modular IoT Infrastructure. New Security Paradigms Workshop (NSPW), ACM, https://doi.org/10.1145/3703465.3703468
  3. K. Baig, D. Napoli, S. Chiasson (2023). A comparison of users’ and non-users’ perceptions of health and ancestry at-home DNA testing. EuroUSEC, Springer, https://doi.org/10.1145/3617072.3617107
  4. K. Chaudhry, A.L. Theus, H. Assal, S. Chiasson (2023) .`It’s not that I want to see the student’s bedroom…’: Instructor Perceptions of e-Proctoring Software. EuroUSEC, Springer, https://doi.org/10.1145/3617072.3617103
  5. P. Chametka, S. Maqsood, S. Chiasson (2023). Security and Privacy perceptions of mental health chatbots. Privacy, Security, and Trust (PST), IEEE, https://doi.org/10.1109/PST58708.2023.10320174
  6. A.-L. Theus, S. Chiasson (2023). `A solution to a problem that didn’t exist?’: Exploring Attitudes Towards Smart Streetlighting Systems. INTERACT, IFIP, https://doi.org/10.1007/978-3-031-42286-7_12
  7. M. Keleher, P. Nagabandi, S. Maqsood, S. Chiasson (2022). How well do experts understand end-users’ perceptions of manipulative patterns? NordiCHI, ACM, https://doi.org/10.1145/3546155.3546656
  8.  F. Westin, K. Hundlani, S. Chiasson (2022). `I just want to play games with friends and it asked me for all of my information’: Trading privacy for connection during the COVID-19 pandemic. EuroUSEC, Springer, https://doi.org/10.1145/3549015.3555672
  9. S.G. Morkonda, S. Chiasson, P.C. van Oorschot (2021). Empirical Analysis and Privacy Implications in OAuth-based Single Sign-On Systems. Workshop on Privacy in the Electronic Society (WPES), ACM, https://doi.org/10.1145/3463676.3485600
  10. K. Baig, K. Hundlani, E. Kazan, S. Chiasson (2021). Replication: Effects of Media on the Mental Models of Technical Users. Symposium on Usable Privacy and Security (SOUPS), USENIX.
  11. D. Napoli, K. Baig, S. Maqsood, S. Chiasson (2021). `I’m Literally Just Hoping This Will Work’: Obstacles Blocking the Online Security and Privacy of Users with Visual Disabilities. Symposium on Usable Privacy and Security (SOUPS), USENIX.
  12. L. Zhang-Kennedy, S. Chiasson (2021). `Whether it’s moral is a whole other story’: Consumer perspectives on privacy regulations and corporate data practices. Symposium on Usable Privacy and Security (SOUPS), USENIX.
  13. E. Ulqinaku, H. Assal, A. Abdou, S. Chiasson, S. Čapkun (2021). Is Real-time Phishing Eliminated with FIDO? Social Engineering Downgrade Attacks against FIDO Protocols. USENIX Security.
  14. F. Westin, S. Chiasson (2021).`It’s So Difficult to Sever that Connection’: The Role of FoMO in Users’ Reluctant Privacy Behaviours. ACM CHI, https://doi.org/10.1145/3411764.3445104 *Honourable Mention Award, Top 5% of papers
  15. S. Maqsood, S. Chiasson (2021). “They think it’s totally fine to talk to somebody on the internet they don’t know”: Teachers’ perceptions and mitigation strategies of tweens’ online risks. ACM CHI, https://doi.org/10.1145/3411764.3445224
  16. M. Lutaaya, H. Assal, K. Baig, S. Maqsood, S. Chiasson (2021). “Lose Your Phone, Lose Your Identity”: Exploring Users’ Perceptions and Expectations of a Digital Identity Service. USEC, Internet Society.
  17. K. Baig, R. Mohamed, A.-L. Theus, S. Chiasson (2020). “I’m hoping they’re an ethical company that won’t do anything that I’ll regret”: Users Perceptions of At-home DNA Testing Companies. ACM CHI 2020, https://doi.org/10.1145/3313831.3376800
  18. R. Jeong, S. Chiasson (2020). `Lime’, `Open Lock’, and `Blocked’: Children’s Perception of Colors, Symbols, and Words in Cybersecurity Warnings. ACM CHI 2020, https://doi.org/10.1145/3313831.3376611
  19. S. Gabriele, S. Chiasson (2020). Understanding Fitness Tracker Users’ Security and Privacy Knowledge, Attitudes and Behaviours. ACM CHI 2020, https://doi.org/10.1145/3313831.3376651
  20. R. Mohamed, S. Chiasson (2020). The Influence of Decaying the Representation of Older Social Media Content on Simulated Hiring Decision. ACM CHI 2020, https://dl.acm.org/doi/10.1145/3313831.3376346
  21. F. Westin, S. Chiasson (2019). Opt Out of Privacy or “Go Home”: Understanding Reluctant Privacy Behaviours through the FoMO-Centric Design Paradigm. New Security Paradigms Workshop (NSPW) 2019, https://doi.org/10.1145/3368860.3368865
  22. E. Spero, M. Stojmenovic, S. Chiasson, R. Biddle (2019). Control and Understanding in Malware and Software. APWG eCrime 2019, https://doi.org/10.1109/eCrime47957.2019.9037597
  23. Y. Abdelaziz, D. Napoli, S. Chiasson (2019). End-users and service providers: trust and distributed responsibility for account security. Privacy, Security, and Trust (PST) 2019, https://doi.org/10.1109/PST47121.2019.8949041
  24. H. Assal, S. Chiasson (2019). “Think secure from the beginning”: A Survey with Software Developers. ACM CHI 2019, https://doi.org/10.1145/3290605.3300519 *Best Paper Award: Top 1%.
  25. L. Zhang-Kennedy, H. Assal, J. Rocheleau, R. Mohamed, K. Baig, S. Chiasson (2018). The aftermath of a crypto-ransomware attack at a large academic institution. USENIX Security.
  26. R. Mohamed, S. Chiasson (2018). Online Privacy and Aging of Digital Artifacts. Symposium on Usable Privacy and Security (SOUPS), USENIX.
  27. H. Assal, S. Chiasson (2018). Security in the Software Development Lifecycle. Symposium on Usable Privacy and Security (SOUPS), USENIX.
  28. S. Maqsood, C. Mekhail, S. Chiasson (2018). A Day in the Life of Jos: A Web-based Game to Increase Children’s Digital Literacy. Interaction Design and Children (IDC), ACM, https://doi.org/10.1145/3202185.3202753
  29. R. Cooper, H. Assal, S. Chiasson (2017). Cross-national privacy concerns on data collection by government agencies. IEEE Privacy, Security, and Trust, https://doi.org/10.1109/PST.2017.00030
  30. L. Zhang-Kennedy, K. Baig, S. Chiasson (2017). Engaging Children About Online Privacy Through Storytelling in an Interactive Comic. British HCI, https://doi.org/10.14236/ewic/HCI2017.45
  31. K. Hundlani, S. Chiasson, L. Hamid (2017). No passwords needed: The iterative design of a parent-child authentication mechanism. MobileHCI, ACM, https://doi.org/10.1145/3098279.3098550
  32. R. Mohamed, T. Bardini Idalino, S. Chiasson (2017). When private and professional lives meet: The impact of digital footprints on employees and political candidates. Social Media & Society, ACM, https://doi.org/10.1145/3097286.3097334
  33. B. Obada-Obieh, S. Chiasson, A. Somayaji (2017). “Don’t Break My Heart!”: User Security Strategies for Online Dating. USEC, Internet Society, http://doi.org/10.14722/usec.2017.23046
  34. H. Assal, S. Chiasson, R. Biddle (2016). Cesar: Visual representation of source code vulnerabilities. VizSec, IEEE, https://doi.org/10.1109/VIZSEC.2016.7739576
  35. S. Hurtado, S. Chiasson (2016). An Eye-tracking Evaluation of Driver Distraction and Unfamiliar Road Signs. Automotive ’UI, ACM, https://doi.org/10.1145/3003715.3005407
  36. L. Zhang-Kennedy, C. Mekhail, Y. Abdelaziz, and S. Chiasson (2016). From nosy little brothers to stranger-danger: Children and parents’ perception of mobile threats. In Interaction Design and Children (IDC). ACM, https://doi.org/10.1145/2930674.2930716
  37. L. Zhang-Kennedy, E. Fares, S. Chiasson, and R. Biddle (2016). The effects of interactivity on information visualization about internet phishing trends. In APWG eCrime. IEEE, https://doi.org/10.1109/ECRIME.2016.7487941
  38. L. Zhang-Kennedy, S. Chiasson, and P. C. van Oorschot (2016). Revisiting password rules: Facilitating human management of passwords. In APWG eCrime. IEEE, https://doi.org/10.1109/ECRIME.2016.7487945
  39. M. Baslyman and S. Chiasson (2016). Smells phishy? An educational game about online phishing scams. In APWG eCrime. IEEE, https://doi.org/10.1109/ECRIME.2016.7487946
  40. G. Reynaga, S. Chiasson, and P. C. van Oorschot (2015). Heuristics for the evaluation of captchas on smartphones. In British HCI Conference. ACM, https://doi.org/10.1145/2783446.2783583
  41. G. Reynaga, S. Chiasson, and P. C. van Oorschot (2015). Exploring the usability of captchas on smartphones: Comparisons and recommendations. In NDSS Workshop on Usable Security (USEC). Internet Society, http://doi.org/10.14722/usec.2015.23006
  42. A. Forget, S. Chiasson, and R. Biddle (2015). Choose Your Own Authentication. In New Security Paradigm Workshop (NSPW). ACM, https://doi.org/10.1145/2841113.2841114
  43. F. Chanchary and S. Chiasson (2015). User perceptions of sharing, advertising, and tracking. In Symposium on Usable Privacy and Security (SOUPS). USENIX.
  44. H. Assal, S. Hurtado, A. Imran, and S. Chiasson (2015). What’s the deal with privacy apps?: a comprehensive exploration of user perception and usability. In Mobile and Ubiquitous Multimedia (MUM). ACM, https://doi.org/10.1145/2836041.2836044
  45. L. Zhang-Kennedy, S. Chiasson, and R. Biddle (2014). Stop clicking on ‘update later’: Persuading users they need up-to-date antivirus protection. In International Conference on Persuasive Technology (PERSUASIVE), pages 302–322. Springer LNCS, https://doi.org/10.1007/978-3-319-07127-5_27
  46. C. Grimm and S. Chiasson (2014). Survey on the fate of digital footprints after death. In Workshop on Usable Security (USEC). Internet Society, http://doi.org/10.14722/usec.2014.23049
  47. L. Zhang-Kennedy, S. Chiasson, and R. Biddle (2013). Password advice shouldn’t be boring: Visualizing password guessing attacks. In APWG eCrime, pages 1–11. IEEE, https://doi.org/10.1109/eCRS.2013.6805770
  48. G. Reynaga and S. Chiasson (2013). The usability of captchas on smartphones. In Int. Conference on Security and Cryptography (SECRYPT), pages 427–434. SCITEPRESS.
  49. F. Lalonde Levesque, J. Nsiempba, J. Fernandez, S. Chiasson, and A. Somayaji (2013). A clinical study of risk factors related to malware infections. In SIGSAC Conference on Computer and Communications Security (CCS), pages 97–108. ACM, https://doi.org/10.1145/2508859.2516747
  50. H.-Y. Chiang and S. Chiasson (2013). Improving user authentication on mobile devices: a touch-screen graphical password. In Int. Conference on MobileHCI, pages 251–260. ACM, https://doi.org/10.1145/2493190.2493213
  51. V. Boothroyd and S. Chiasson (2013). Writing down your password: Does it help? In Annual International Conference on Privacy, Security and Trust (PST), pages 267–274. IEEE, https://doi.org/10.1109/PST.2013.6596062
  52. Y. Xu, G. Reynaga, S. Chiasson, J.-M. Frahm, F. Monrose, and P. C. van Oorschot (2012). Security and usability challenges of moving-object captchas: Decoding codewords in motion. In USENIX Security Symposium.
  53. D. McCarney, D. Barrera, J. Clark, S. Chiasson, and P. C. van Oorschot (2012). Tapas: Design, implementation, and usability evaluation of a password manager. In Annual Computer Security Applications Conference (ACSAC), pages 89–98. ACM, https://doi.org/10.1145/2420950.2420964
  54. M. Mahmoud, S. Chiasson, and A. Matrawy (2012). Does context influence responses to firewall warnings? In APWG eCrime, pages 1–10. IEEE, https://doi.org/10.1109/eCrime.2012.6489516
  55. F. Lalonde Levesque, C. Davis, J. Fernandez, S. Chiasson, and A. Somayaji (2012). Methodology for a field study of anti-malware software. In Workshop on Usable Security (USEC), Financial Cryptography and Data Security (FC), pages 80–85. Springer (LNCS), https://doi.org/10.1007/978-3-642-34638-5_7
  56. A. Forget, S. Chiasson, and R. Biddle (2012). Supporting learning of an unfamiliar authentication scheme. In E-LEARN, pages 1002–1011. AACE.
  57. S. Chiasson, C. Deschamps, E. Stobert, M. Hlywa, B. Freitas Machado, A. Forget, N. Wright, G. Chan, and R. Biddle (2012). The MVP web-based authentication framework. In International Conference on Financial Cryptography and Data Security (FC), pages 16–24. Springer, https://doi.org/10.1007/978-3-642-32946-3_2
  58. S. Chiasson, M. Modi, and R. Biddle (2011). AuctionHero: The design of a game to learn and teach about computer security. In E-LEARN. AACE.
  59. E. Stobert, A. Forget, S. Chiasson, P.C. van Oorschot, R. Biddle (2010). Exploring Usability Effects of Increasing Security in Click-based Graphical Passwords. Annual Computer Security Applications Conference (ACSAC), https://doi.org/10.1145/1920261.1920273
  60. A. Forget, S. Chiasson, R. Biddle (2010). Shoulder-Surfing Resistance with Eye-Gaze Entry in Click-Based Graphical Passwords. ACM SIGCHI Conference on Human Factors in Computing Systems (CHI), https://doi.org/10.1145/1753326.1753491
  61. S. Chiasson, A. Forget, E. Stobert, P.C. van Oorschot, R. Biddle, (2009). Multiple password interference in text and click-based graphical passwords. ACM Computer and Communications Security (CCS), https://doi.org/10.1145/1653662.1653722
  62. S. Chiasson, A. Forget, R. Biddle, P.C. van Oorschot (2008). Influencing Users Towards Better Passwords: Persuasive Cued Click-Points. British Computer Society HCI Conference.
  63. A. Forget, S. Chiasson, P.C. van Oorschot, R. Biddle (2008). Improving Text Passwords Through Persuasion. ACM Symposium on Usable Privacy and Security (SOUPS), https://doi.org/10.1145/1408664.1408666
  64. A. Forget, S. Chiasson, P.C. van Oorschot, R. Biddle (2008). Persuasion for Stronger Passwords: Motivation and Pilot Study. 3rd Conf. on Persuasive Technology, Springer LNCS, https://doi.org/10.1007/978-3-540-68504-3_13
  65. S. Chiasson, J. Srinivasan, R. Biddle, P.C. van Oorschot (2008). Centered Discretization with Application to Graphical Passwords. USENIX Usability, Psychology, and Security (UPSEC).
  66. A. Forget, S. Chiasson, R. Biddle (2007). Persuasion as Education for Computer Security. AACE World Conference on E-Learning in Corporate, Government, Healthcare & Higher Education (E-LEARN).
  67. S. Chiasson, P.C. van Oorschot, R. Biddle (2007). Graphical Password Authentication Using Cued Click Points. European Symposium Research Computer Security (ESORICS), Springer LNCS, https://doi.org/10.1007/978-3-540-74835-9_24
  68. S. Chiasson, R. Biddle, P.C. van Oorschot (2007). A Second Look at the Usability of Click-based Graphical Passwords. ACM Symposium on Usable Privacy and Security (SOUPS), https://doi.org/10.1145/1280680.1280682  *Best Paper Award
  69. S. Chiasson, P.C. van Oorschot, R. Biddle (2006). A Usability Study and Critique of Two Password Managers. USENIX Security Symposium.
  70. S. Chiasson, and C. Gutwin (2005). Testing the Media Equation with Children. ACM SIGCHI Conference on Human Factors in Computing Systems (CHI), https://doi.org/10.1145/1054972.1055089

Workshop Papers

  1. D. Napoli, S. Chiasson (2023). Remote Healthcare Technology Use Cases and the Contextual Integrity of Older Adult User Privacy. Symposium on Applications of Contextual Integrity.
  2. L. Kyi, S. Chiasson, E. Stobert (2020). How Individual Differences Impact Perceived Password Security Management. USENIX WAY workshop (4-page paper).
  3. H. Assal, S. Chiasson (2018). Motivations and Amotivations for Software Security: Preliminary Results. Workshop on Security Information Workers (WSIW), USENIX SOUPS.
  4. R. Mohamed, S. Chiasson (2018). Digital aging for increasing privacy in Online Social Networks. Moving Beyond a “one-size-fits-all” approach: Exploring Individual Differences in Privacy Workshop, ACM CHI.
  5. H. Assal, S. Chiasson (2014). Tor for All: A Usability Study of Tor-enabled Mobile Apps. GRAND NCE Annual Conference.
  6. S. Maqsood, S. Chiasson, A. Girouard (2014). A First Exploration of a Gesture Based Authentication Scheme for Flexible Displays. GRAND NCE Annual Conference
  7. L. Zhang-Kennedy, S. Chiasson, R. Biddle (2013). Interactive Comics as Visual Narratives in Computer Security Education. GRAND NCE Annual Conference.
  8. S. Egelman, J. Bonneau, S. Chiasson, D. Dittrich, S. Schechter (2012). It’s not stealing if you need it: A panel on the ethics of performing research using public data of illicit origin. Financial Cryptography and Data Security (FC), pp 124-132, Springer.
  9. A. Fry, S. Chiasson, A. Somayaji (2012). Not Sealed But Delivered: The (Un)Usability of S/MIME Today. Annual Symposium on Information Assurance (ASIA), pp. 48-61.
  10. S. Chiasson (2011). Roundtable Discussion: Design and Teaching Considerations For E-Learning and Usable Security. AACE Conf. on E-Learning in Corporate, Government, Healthcare & Higher Education (E-LEARN) (4 pages).
  11. S. Chiasson, A. Forget, R. Biddle (2008). Accessibility and Graphical Passwords. Symposium on Accessible Privacy and Security (SOAPS) (3-page paper on workshop website).
  12. S. Chiasson, R. Biddle, A. Somayaji (2007). Even Experts Deserve Usable Security: Design guidelines for security management systems. Workshop on Usable IT Security Management, Pittsburgh, USA (4-page paper on workshop website).
  13. S. Chiasson, R. Biddle (2006). Issues in User Authentication. ACM SIGCHI Conference on Human Factors in Computing Systems (CHI) Workshop on Security User Studies Methodologies and Best Practices.
  14. S. Chiasson, R. Biddle, P.C. van Oorschot (2006). Materials for a Usability Study of Password Managers. Security User Studies Workshop, ACM SOUPS.

Extended Abstracts/Posters

  1. D. Napoli, H. Molyneaux, H. Fournier, S. Chiasson (2025). Terrifying but Helpful: Older Adults’ Perspectives of AI in Future Remote Healthcare Technology. HCII (9-page paper in Springer DL, poster), https://doi.org/10.1007/978-3-031-94159-7_24
  2. K. Chaudhry, A. Mann, H. Assal, and S. Chiasson (2022). “I didn’t even want to turn my head because I was so scared of the prof”: Student Perceptions of e-Proctoring Software. USENIX SOUPS (4-page paper, poster). *Best Poster Award.
  3. F. Westin, K. Hundlani. S. Chiasson (2021). “I’ll throw in a courtesy like”: A poster about features, etiquette, and user privacy. USENIX SOUPS (4-page paper, poster). *Best Poster Award.
  4. M. Lutaaya, K. Baig, S. Maqsood, S. Chiasson (2021). “I’m Not a Millionaire”: How Users’ Online Behaviours and Offline Behaviours Impact Their Privacy. ACM SIGCHI Conference on Human Factors in Computing Systems Late Breaking Work (CHI LBW) (7-page paper in ACM DL, poster), https://doi.org/10.1145/3411763.3451603
  5. D. Napoli, S. Navas Chaparro, S. Chiasson, E. Stobert (2020). Something Doesn’t Feel Right: Using Thermal Warnings to Improve User Security Awareness. USENIX SOUPS (4-page paper, poster).
  6. D. Napoli, S. Chiasson (2019). Security Implications of Online Accessibility Obstacles for Users with Visual Impairments. USENIX SOUPS (5-page paper on SOUPS website, poster).
  7. D. Napoli, S. Chiasson (2018). Assessing Non-Visual SSL Certificates with Desktop and Mobile Screen Readers. ACM CCS Extended Abstracts (2-page paper in ACM DL, poster), https://doi.org/10.1145/3243734.3278495
  8. S. Maqsood, S. Maqsood, R. Biddle, and S. Chiasson (2018). An Exploratory Study of Children’s Online Password Behaviours. ACM IDC Extended Abstracts (6-page paper in ACM DL, poster), https://doi.org/10.1145/3202185.3210772
  9. D. Napoli, S. Chiasson (2018). Exploring the Impact of Colour-Blindness on Computer Game Performance. ACM CHI Late Breaking Work (6-page paper in ACM DL, poster), https://doi.org/10.1145/3170427.3188555
  10. D. Napoli (2018). Developing Accessible and Usable Security (ACCUS) Heuristics. ACM SIGCHI Conference on Human Factors in Computing Systems (CHI) Student Research Competition (SRC) (6-page paper in ACM DL, poster), https://doi.org/10.1145/3170427.3180292
  11. M. Lutaaya (2018). Rethinking App Permissions on iOS. ACM SIGCHI Conference on Human Factors in Computing Systems (CHI), Student Research Competition (SRC) (6-page paper in ACM DL, poster), https://doi.org/10.1145/3170427.3180284
  12. S. Maqsood (2018). Evaluation of a Persuasive Digital Literacy Game for Children. ACM SIGCHI Conference on Human Factors in Computing Systems (CHI) Student Research Competition (SRC) (6-page paper in ACM DL, poster).
  13. L. Zhang-Kennedy, R. Biddle, S. Chiasson (2017). Secure Comics: An Interactive Comic Series for Improving Cyber Security and Privacy. British HCI Interactions Gallery (2-page paper in conference proceedings), https://doi.org/10.14236/ewic/HCI2017.65
  14. L. Zhang-Kennedy, S. Chiasson (2016). Teaching with an Interactive E-book to Improve Children’s Online Privacy Knowledge. ACM IDC (poster, 6-page paper), https://doi.org/10.1145/2930674.2935984
  15. M. Lutaaya, S. Chiasson (2015). Password Rehearsal Memory Games. Symposium on Usable Privacy and Security (SOUPS) (poster, 2-page paper on conference website).
  16. L. Zhang-Kennedy, E. Fares, S. Chiasson, R. Biddle (2015). Geo-Phisher: The design of a global phishing trend visualization. Symposium on Usable Privacy and Security (SOUPS) (poster, 2-page paper on conference website), https://doi.org/10.1109/ECRIME.2016.7487941
  17. H. Assal, J. Wilson, S. Chiasson, R. Biddle (2015). Collaborative Security Code-Review: Towards Aiding Developers. Symposium on Usable Privacy and Security (SOUPS) (poster, 2-page paper on conference website).
  18. H. Assal, S. Chiasson (2014). Will this onion make you cry? A usability evaluation of Tor-enabled mobile apps. Symposium on Usable Privacy and Security (SOUPS) (2-page paper on conference website). *Distinguished Poster Award
  19. C. Mekhail, L. Zhang-Kennedy, S. Chiasson (2014). Visualizations to Teach about Mobile Online Privacy. Persuasive Technology Conference (2-page paper in Springer LNCS, poster).
  20. S. Maqsood (2014). Shoulder Surfing Susceptibility of Bend Passwords. ACM SIGCHI Conference on Human Factors in Computing Systems (CHI), Student Research Competition (SRC) (6-page paper in ACM DL, poster), https://doi.org/10.1145/2559206.2579411
  21. S. Maqsood, S. Chiasson, A. Girouard (2013). Passwords on Flexible Display Devices. ACM CCS (3-page paper in ACM DL, poster), https://doi.org/10.1145/2508859.2512528
  22. E. Stobert, S. Chiasson, R. Biddle (2011). User-Choice Patterns in PassTiles Graphical Passwords. ACSAC (2-page paper, poster).
  23. S. Chiasson, C. Deschamps, M. Hlywa, G. Chan, E. Stobert, R. Biddle (2010). MVP: A web-based framework for user studies in authentication. ACM SOUPS (2-page paper in ACM DL, poster).
  24. E. Stobert, S. Chiasson, R. Biddle (2010). Persuasion, Social Graces, and Computer Security. PERSUASIVE 2010, Springer LNCS (4-page paper in proceedings, poster).
  25. A. Forget, S. Chiasson, R. Biddle (2010). Input Precision for Gaze-Based Graphical Passwords. ACM CHI (6-page paper in ACM DL, Work-in-Progress (WIP) poster), https://doi.org/10.1145/1753846.1754139
  26. A. Forget, S. Chiasson, R. Biddle (2009). Lessons from Brain Age on Persuasion for Computer Security. ACM CHI (6-page paper in ACM DL, Work-in-Progress (WIP) poster), https://doi.org/10.1145/1520340.1520679
  27. A. Forget, S. Chiasson, R. Biddle (2008). Lessons from Brain Age on Password Memorability. ACM Future Play (2-page paper in ACM DL, poster).
  28. D. LeBlanc, S. Chiasson, A. Forget, R. Biddle (2008). Can eye gaze predict graphical passwords? ACM SOUPS (2-page paper on conference website, poster).
  29. A. Forget, D. Arnold, S. Chiasson (2007). CASE-FX: Feature Modeling Support in an OO CASE Tool. ACM OOPSLA (2-page paper in ACM DL, poster), https://doi.org/10.1145/1297846.1297896
  30. A. Forget, S. Chiasson, R. Biddle (2007). Helping Users Create Better Passwords: Is this the right approach? ACM SOUPS (2-page paper on conference website, poster), https://doi.org/10.1145/1280680.1280703
  31. A. Forget, S. Chiasson, R. Biddle (2007). Helping Users Protect Themselves from e-Criminals in Click-Based Graphical Passwords. APWG eCrime Summit, (2-page paper, poster).

Technical Reports

  1. L. Zhang-Kennedy, S. Chiasson, R. Biddle (2014). Using comics to teach about mobile online privacy. Technical Report TR-14-02, School of Computer Science, Carleton University.
  2. S. Chiasson and C. Gutwin (2005). Design Principles for Children’s Software. Technical Report HCI-TR-05-02, Computer Science Department, University of Saskatchewan, Saskatoon, Canada.

Non-Refereed Contributions (Invited or Minimally Reviewed)

  1. H. Molyneaux, D. Napoli, P. Marmorato, A. Andratis, H. Fournier, E. Stobert, S. Chiasson, C. Munteanu (2026). Challenges in Recruiting Older Adults: Online and In-Person Recruitment Recommendations for Prioritizing Trust. HCI International, Springer, https://doi.org/10.1007/978-3-032-29723-5_20
  2. M. Keleher, A. Morgan, K. Baig, A. Tsang, S. Chiasson (2026). Regulating Privacy in AI Decision-Making Systems: A Survey and Simulation of Canada’s Artificial Intelligence and Data Act. HCI International, Springer, https://doi.org/10.1007/978-3-032-29723-5_26
  3. D. Napoli, H. Molyneaux, H. Fournier, S. Chiasson (2025). Exploring User Perspectives on Data Collection, Data Sharing Preferences, and Privacy Concerns with Remote Healthcare Technology. HCI International, Springer, https://doi.org/10.1007/978-3-031-92840-6_5
  4. A. Szozda, S. Chiasson, R. Thomson (2025). Tools for Transforming Equity, Diversity, and Inclusion in Science, Technology, Engineering, and Mathematics. Canadian Chemistry Conference (CSC).
  5. M. Shlega, S. Maqsood, S. Chiasson (2022). Users, Smart Homes, and Digital Assistants: Impact of Technology Experience and Adoption. HCI International (HCII) (paper), https://doi.org/10.1007/978-3-031-05563-8_26
  6. D. Napoli, S. Navas Chaparro, S. Chiasson (2021). Enhancing the Experience of Security and Privacy Warnings with Smell, Taste, and Temperature. ACM CHI Workshop on Smell, Taste, and Temperature Interfaces (STT) (position paper).
  7. L. Zhang-Kennedy, S. Chiasson (2015). Improving Children’s Mobile Privacy Awareness and Behaviour. SOUPS Workshop on Inclusive Privacy and Security (WIPS) (position paper).
  8. S. Hurtado, S. Chiasson (2015). Unfamiliar road signs: Measuring the impact on driver distraction. CRA-W Graduate Cohort Workshop (poster).
  9. M. Baslyman, S. Chiasson (2015). “Smells Phishy”: An Educational Game About Online Phishing Scams. University of Ottawa Annual Engineering and Computer Science Poster Competition *IEEE Best Poster Award (first place out of 65 entries).
  10. G. Reynaga, S. Chiasson (2014). Adapting CAPTCHAs for Smartphone Usage. NSERC Surfnet Newsletter, v5(1).
  11. A. Forget, S. Chiasson, R. Biddle (2014). Towards supporting a diverse ecosystem of authentication schemes. SOUPS Who Are You?: Adventures in Authentication: WAY Workshop (2-page paper).
  12. S. Hurtado, A. Imran, S. Chiasson (2014). A usability study of ChatSecure. CRA-W Graduate Cohort Workshop (poster).
  13. S. Maqsood, S. Chiasson, A. Girouard (2014). Bend passwords for flexible displays. CRA-W Graduate Cohort Workshop (poster).
  14. L. Zhang-Kennedy, C. Mekhail, S. Chiasson (2014). Visualizations to teach about mobile online privacy. GRAND NCE Annual Conference (poster).
  15. V. Boothroyd, A. Patrick, S. Chiasson (2014). Older adults’ perception of online risk. GRAND NCE Annual Conference (poster).
  16. L. Zhang-Kennedy, S. Chiasson, R. Biddle (2013). Interactive comics to teach about computer security. GRAND NCE Annual Conference (poster).
  17. V. Boothroyd, S. Chiasson (2013). Perception of online risk: How do older and younger adults perceive online risk? NSERC ISSNet Annual Workshop (poster).
  18. S. Maqsood, S. Chiasson (2013). Passwords on Flexible Display Devices. NSERC ISSNet Annual Workshop (poster).
  19. Y. Xu, G. Reynaga, S. Chiasson, J.M Frahm, F. Monrose, P.C. van Oorschot. (2012) Security and Usability Challenges of Moving-Object CAPTCHAs: Decoding Codewords in Motion. ACM SOUPS (poster).
  20. L. Zhang, S. Chiasson, R. Biddle (2012). Teaching about Password Guessing Attacks Through Visualizations. GRAND NCE Annual Conference (poster).
  21. V. Boothroyd, S. Chiasson. (2012). Writing down your password: Does it help? NSERC ISSNet Annual Workshop (poster).
  22. H.-Y. Chiang, S. Chiasson. (2012). Usability testing of graphical password schemes on mobile devices. NSERC ISSNet Annual Workshop (poster).
  23. S. Chiasson and R. Biddle (2007). Persuading Users to Behave Securely. Persuasive Technology Conference (poster).