Sotabase

Career

· Principal Product Security Engineer, MathWorks2023–
· PhD in Computation, Organizations, and Society, Carnegie Mellon University2015–
· Technical Staff, MIT Lincoln Laboratory2015–2023
· Undergraduate Degree, Brown University
· Master's Degree, Purdue University

Publications (51)

Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms
IEEE Symposium on Security and Privacy · 2012
505
cited
Of passwords and people: measuring the effect of password-composition policies
International Conference on Human Factors in Computing Systems · 2011
463
cited
Smart, useful, scary, creepy: perceptions of online behavioral advertising
Symposium On Usable Privacy and Security · 2012
409
cited
Encountering stronger password requirements: user attitudes and behaviors
Symposium On Usable Privacy and Security · 2010
399
cited
How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation
USENIX Security Symposium · 2012
352
cited
Measuring password guessability for an entire university
Conference on Computer and Communications Security · 2013
266
cited
"I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab
Symposium On Usable Privacy and Security · 2015
236
cited
Why Johnny can't opt out: a usability evaluation of tools to limit online behavioral advertising
International Conference on Human Factors in Computing Systems · 2012
205
cited
Measuring Real-World Accuracies and Biases in Modeling Password Guessability
USENIX Security Symposium · 2015
194
cited
What matters to users?: factors that affect users' willingness to share information with online advertisers
Symposium On Usable Privacy and Security · 2013
164
cited
Access Control for Home Data Sharing: Attitudes, Needs and Practices
International Conference on Human Factors in Computing Systems · 2010
162
cited
Can long passwords be secure and usable?
International Conference on Human Factors in Computing Systems · 2014
160
cited
Correct horse battery staple: exploring the usability of system-assigned passphrases
Symposium On Usable Privacy and Security · 2012
159
cited
Designing Password Policies for Strength and Usability
ACM Transactions on Privacy and Security · 2016
150
cited
Usability and Security of Text Passwords on Mobile Devices
International Conference on Human Factors in Computing Systems · 2016
122
cited
SoK: Cryptographically Protected Database Search
IEEE Symposium on Security and Privacy · 2017
120
cited
A Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior
International Conference on Human Factors in Computing Systems · 2015
93
cited
Measuring the Effectiveness of Privacy Tools for Limiting Behavioral Advertising
2012
89
cited
Telepathwords: Preventing Weak Passwords by Reading Users' Minds
USENIX Security Symposium · 2014
82
cited
"My religious aunt asked why i was trying to sell her viagra": experiences with account hijacking
International Conference on Human Factors in Computing Systems · 2014
74
cited
Sotabase
Rich Shay | Researcher Profile | Sotabase | Sotabase