A Large-Scale Measurement of Cybercrime Against Individuals
Casey Breen, Cormac Herley, Elissa M. Redmiles
CHI 2022 | April 2022
Cormac Herley
Principal Researcher
Publications
Publications by Year
-
-
Pushing on string: the “don’t care” region of password strength
Dinei Florencio, Cormac Herley
Communications ACM | September 2016
The Unfalsifiability of Security Claims
Proceedings of the 3rd Asian Symposium on Programming Languages and Systems (APLAS '05) | May 2016
-
Passwords and the Evolution of Imperfect Authentication
Joe Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
Communications of ACM | June 2015
-
An Administrator’s Guide to Internet Password Research
Dinei Florencio, Cormac Herley, Paul C. van Oorschot
Usenix LISA | November 2014
Security, Cybercrime and Scale
September 2014
Telepathwords: Preventing Weak Passwords by Reading Users’ Minds
Saranga Komanduri, Rich Shay, Lorrie Cranor, Cormac Herley, Stuart Schechter
Proceedings of the 23rd USENIX Security Symposium | August 2014
Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts
Dinei Florencio, Cormac Herley, Paul C. van Oorschot
Usenix Security | August 2014
FUD: A Plea for Intolerance
Dinei Florencio, Cormac Herley, Adam Shostack
Communications ACM | June 2014
More is Not the Answer
IEEE Security and Privacy magazine | January 2014
-
Breaking our password hash habit: Why the sharing of users’ password choices for defensive analysis is an underprovisioned social good, and what we can do to encourage it.
Cormac Herley, Stuart Schechter
Workshop on the Economics of Information Security | June 2013
You Needn’t Build That: Reusable Ethics-Compliance Infrastructure for Human Subjects Research
Cristian Bravo-Lillo, Serge Egelman, Cormac Herley, Stuart Schechter, Janice Tsai
Cyber-security Research Ethics Dialog & Strategy Workshop (CREDS 2013) | May 2013
Detecting Malicious Landing Pages in Malware Distribution Networks
Gang Wang, Jack W. Stokes, Cormac Herley, David Felstead
IEEE DSN | January 2013
Does My Password Go up to Eleven? The Impact of Password Meters on Password Selection
Serge Egelman, Andreas Sotirakopoulos, Ildar Muslukhov, Konstantin Beznosov, Cormac Herley
Proc. CHI | January 2013
Small World: Collisions Among Attackers in a Finite Population
WEIS | January 2013
When does Targeting make sense for an attacker?
IEEE Security and Privacy magazine | January 2013
-
Why Do Nigerian Scammers Say They are From Nigeria?
WEIS | June 2012
Why Do Nigerian Scammers Say They are From Nigeria?
WEIS | June 2012
The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes
Joseph Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
IEEE Symp. Security and Privacy | May 2012
A Research Agenda Acknowledging the Persistence of Passwords
Cormac Herley, Paul van Oorschot
IEEE Security & Privacy Magazine | January 2012
Is Everything We Know About Password Stealing Wrong?
Dinei Florencio, Cormac Herley
IEEE Security and Privacy magazine | January 2012
Why do Nigerian Scammers Say They are from Nigeria?
WEIS | January 2012
-
Is Everything We Know About Password-Stealing Wrong?
Dinei Florencio, Cormac Herley
MSR-TR-2011-132 | December 2011
Painless Migration from Passwords to Two Factor Authentication
Ziqing Mao, Dinei Florencio, Cormac Herley
WIFS | November 2011
WIFS
A Large-Scale Study of File Prevalance
MSR-TR-2011-131 | November 2011
Sex, Lies and Cyber-crime Surveys
Dinei Florencio, Cormac Herley
MSR-TR-2011-75 | June 2011
Where Do All the Attacks Go?
Dinei Florencio, Cormac Herley
MSR-TR-2011-74 | June 2011
-
Popularity is Everything: A new approach to protecting passwords from statistical-guessing attacks
Stuart Schechter, Cormac Herley, Michael Mitzenmacher
The 5th USENIX Workshop on Hot Topics in Security (HotSec '10) | August 2010
This paper scheduled to be made public 12:01AM, July 19.
Where Do Security Policies Come From?
Dinei Florencio, Cormac Herley
SOUPS | June 2010
SOUPS Best paper award
Phishing and Money Mules
Dinei Florencio, Cormac Herley
WIFS | January 2010
The Plight of the Targeted Attacker in a World of Scale
WEIS | January 2010
-
Economics and the Underground Economy
Cormac Herley, Dinei Florencio
July 2009
Black Hat
Nobody Sells Gold for the Price of Silver: Dishonesty, Uncertainty and the Underground Economy
Cormac Herley, Dinei Florencio
MSR-TR-2009-34 | June 2009
So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users
MSR-TR-2009-46 | April 2009
NSPW
Passwords: If We’re So Smart, Why Are We Still Using Them?
Cormac Herley, P.C. van Oorschot, Andrew S. Patrick
Proc. Financial Crypto | January 2009
-
A Robust Link-Translating Proxy Server Mirroring the Whole Web
Ziqing Mao, Cormac Herley
MSR-TR-2008-165 | November 2008
A Profitless Endeavor: Phishing as Tragedy of the Commons
Cormac Herley, Dinei Florencio
Proceedings in the New Security Paradigms Workshop | September 2008
Can “Something You Know” be Saved?
Baris Coskun, Cormac Herley
Proc. 11th Information Security Conference (ISC 2008) | September 2008
One Time Password Access to Any Server without Changing the Server
Dinei Florencio, Cormac Herley
September 2008
Protecting Financial Institutions from Brute-Force Attacks
Cormac Herley, Dinei Florencio
MSR-TR-2007-132 | September 2008
Proceedings of the 1999 Haskell Workshop
-
Evaluating a Trial Deployment of Password Re-Use for Phishing Prevention
Dinei Florencio, Cormac Herley
Proc. Anti-phishing Working Group 2nd Annual eCrime Researchers Summit | October 2007
Do Strong Web Passwords Accomplish Anything?
Dinei Florencio, Cormac Herley, Baris Coskun
Proc. Second USENIX Workshop on Hot Topics in Security (HotSec '07) | August 2007
Do Strong Web Passwords Accomplish Anything?
Dinei Florencio, Cormac Herley, Baris Coskun
MSR-TR-2007-64 | June 2007
A Large-Scale Study of Web Password Habits
Dinei Florencio, Cormac Herley
Proceedings of the 16th international conference on the World Wide Web | May 2007
-
KLASSP: Entering Passwords on a Spyware Infected Machine Using a Shared-Secret Proxy
Dinei Florencio, Cormac Herley
December 2006
KLASSP: Enterring Passwords from a Spyware Infected Machine
Dinei Florencio, Cormac Herley
MSR-TR-2006-74 | December 2006
A Large Scale Study of Web Password Habits
Dinei Florencio, Cormac Herley
MSR-TR-2006-166 | November 2006
How to Login from an Internet Cafe Without Worrying about Keyloggers
Dinei Florencio, Cormac Herley
MSR-TR-2006-12 | July 2006
Password Rescue: A New Approach to Phishing Prevention
Dinei Florencio, Cormac Herley
July 2006
Analyzing and Improving Anti-Phishing Schemes
Dinei Florencio, Cormac Herley
May 2006
Analyzing and Improving a BitTorrent Network’s Performance Mechanisms
Ashwin Bharambe, Cormac Herley, Venkata N. Padmanabhan, Venkat Padmanabhan
April 2006
ARGOS: Automatically extracting Repeating Objects from multimedia Streams
MSR-TR-2004-02 | February 2006
IEEE/ACM Transactions on Networking
-
Accurate Repeat Finding and Object Skipping Using Fingerprints
November 2005
Inferring Similarity Between Music Objects with Application to Playlist Generation
Robert Ragno, Chris J.C. Burges, Cormac Herley
November 2005
Occlusion Removal with Minimum Number of Images
October 2005
Stopping a Phishing Attack, Even when the Victims Ignore Warnings
Dinei Florencio, Cormac Herley
October 2005
Some Observations on BitTorrent Performance
Ashwin Bharambe, Cormac Herley, Venkat Padmanabhan
July 2005
-
Understanding and Deconstructing BitTorrent Performance
Ashwin Bharambe, Cormac Herley, Venkata N. Padmanabhan, Venkat Padmanabhan
MSR-TR-2004-142 | December 2004
Detection and Deterrence of Counterfeiting of Valuable Documents
October 2004
Recursive Method to Detect and Segment Multiple Rectangular Objects in Scanned Images
MSR-TR-2004-01 | January 2004
-
-
Why Watermarking is Nonsense
September 2002
-
Publications by Research Area
-
A Large-Scale Measurement of Cybercrime Against Individuals
Casey Breen, Cormac Herley, Elissa M. Redmiles
CHI 2022 | April 2022
Pushing on string: the “don’t care” region of password strength
Dinei Florencio, Cormac Herley
Communications ACM | September 2016
The Unfalsifiability of Security Claims
Proceedings of the 3rd Asian Symposium on Programming Languages and Systems (APLAS '05) | May 2016
Passwords and the Evolution of Imperfect Authentication
Joe Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
Communications of ACM | June 2015
An Administrator’s Guide to Internet Password Research
Dinei Florencio, Cormac Herley, Paul C. van Oorschot
Usenix LISA | November 2014
Security, Cybercrime and Scale
September 2014
Telepathwords: Preventing Weak Passwords by Reading Users’ Minds
Saranga Komanduri, Rich Shay, Lorrie Cranor, Cormac Herley, Stuart Schechter
Proceedings of the 23rd USENIX Security Symposium | August 2014
Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts
Dinei Florencio, Cormac Herley, Paul C. van Oorschot
Usenix Security | August 2014
FUD: A Plea for Intolerance
Dinei Florencio, Cormac Herley, Adam Shostack
Communications ACM | June 2014
More is Not the Answer
IEEE Security and Privacy magazine | January 2014
Breaking our password hash habit: Why the sharing of users’ password choices for defensive analysis is an underprovisioned social good, and what we can do to encourage it.
Cormac Herley, Stuart Schechter
Workshop on the Economics of Information Security | June 2013
You Needn’t Build That: Reusable Ethics-Compliance Infrastructure for Human Subjects Research
Cristian Bravo-Lillo, Serge Egelman, Cormac Herley, Stuart Schechter, Janice Tsai
Cyber-security Research Ethics Dialog & Strategy Workshop (CREDS 2013) | May 2013
Does My Password Go up to Eleven? The Impact of Password Meters on Password Selection
Serge Egelman, Andreas Sotirakopoulos, Ildar Muslukhov, Konstantin Beznosov, Cormac Herley
Proc. CHI | January 2013
Small World: Collisions Among Attackers in a Finite Population
WEIS | January 2013
Why Do Nigerian Scammers Say They are From Nigeria?
WEIS | June 2012
A Research Agenda Acknowledging the Persistence of Passwords
Cormac Herley, Paul van Oorschot
IEEE Security & Privacy Magazine | January 2012
Painless Migration from Passwords to Two Factor Authentication
Ziqing Mao, Dinei Florencio, Cormac Herley
WIFS | November 2011
WIFS
Economics and the Underground Economy
Cormac Herley, Dinei Florencio
July 2009
Black Hat
So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users
MSR-TR-2009-46 | April 2009
NSPW
Passwords: If We’re So Smart, Why Are We Still Using Them?
Cormac Herley, P.C. van Oorschot, Andrew S. Patrick
Proc. Financial Crypto | January 2009
A Profitless Endeavor: Phishing as Tragedy of the Commons
Cormac Herley, Dinei Florencio
Proceedings in the New Security Paradigms Workshop | September 2008
Protecting Financial Institutions from Brute-Force Attacks
Cormac Herley, Dinei Florencio
MSR-TR-2007-132 | September 2008
Proceedings of the 1999 Haskell Workshop
Can “Something You Know” be Saved?
Baris Coskun, Cormac Herley
Proc. 11th Information Security Conference (ISC 2008) | September 2008
Evaluating a Trial Deployment of Password Re-Use for Phishing Prevention
Dinei Florencio, Cormac Herley
Proc. Anti-phishing Working Group 2nd Annual eCrime Researchers Summit | October 2007
Do Strong Web Passwords Accomplish Anything?
Dinei Florencio, Cormac Herley, Baris Coskun
Proc. Second USENIX Workshop on Hot Topics in Security (HotSec '07) | August 2007
Do Strong Web Passwords Accomplish Anything?
Dinei Florencio, Cormac Herley, Baris Coskun
MSR-TR-2007-64 | June 2007
A Large-Scale Study of Web Password Habits
Dinei Florencio, Cormac Herley
Proceedings of the 16th international conference on the World Wide Web | May 2007
KLASSP: Entering Passwords on a Spyware Infected Machine Using a Shared-Secret Proxy
Dinei Florencio, Cormac Herley
December 2006
KLASSP: Enterring Passwords from a Spyware Infected Machine
Dinei Florencio, Cormac Herley
MSR-TR-2006-74 | December 2006
A Large Scale Study of Web Password Habits
Dinei Florencio, Cormac Herley
MSR-TR-2006-166 | November 2006
Password Rescue: A New Approach to Phishing Prevention
Dinei Florencio, Cormac Herley
July 2006
How to Login from an Internet Cafe Without Worrying about Keyloggers
Dinei Florencio, Cormac Herley
MSR-TR-2006-12 | July 2006
Analyzing and Improving Anti-Phishing Schemes
Dinei Florencio, Cormac Herley
May 2006
Detection and Deterrence of Counterfeiting of Valuable Documents
October 2004
-
Telepathwords: Preventing Weak Passwords by Reading Users’ Minds
Saranga Komanduri, Rich Shay, Lorrie Cranor, Cormac Herley, Stuart Schechter
Proceedings of the 23rd USENIX Security Symposium | August 2014
Sex, Lies and Cyber-crime Surveys
Dinei Florencio, Cormac Herley
MSR-TR-2011-75 | June 2011
Inferring Similarity Between Music Objects with Application to Playlist Generation
Robert Ragno, Chris J.C. Burges, Cormac Herley
November 2005
-
Minimum Rate Sampling and Reconstruction of Signals with Arbitrary Frequency Support
July 1999
Breaking our password hash habit: Why the sharing of users’ password choices for defensive analysis is an underprovisioned social good, and what we can do to encourage it.
Cormac Herley, Stuart Schechter
Workshop on the Economics of Information Security | June 2013
Small World: Collisions Among Attackers in a Finite Population
WEIS | January 2013
Detecting Malicious Landing Pages in Malware Distribution Networks
Gang Wang, Jack W. Stokes, Cormac Herley, David Felstead
IEEE DSN | January 2013
Popularity is Everything: A new approach to protecting passwords from statistical-guessing attacks
Stuart Schechter, Cormac Herley, Michael Mitzenmacher
The 5th USENIX Workshop on Hot Topics in Security (HotSec '10) | August 2010
This paper scheduled to be made public 12:01AM, July 19.
A Robust Link-Translating Proxy Server Mirroring the Whole Web
Ziqing Mao, Cormac Herley
MSR-TR-2008-165 | November 2008
Analyzing and Improving a BitTorrent Network’s Performance Mechanisms
Ashwin Bharambe, Cormac Herley, Venkata N. Padmanabhan, Venkat Padmanabhan
April 2006
Some Observations on BitTorrent Performance
Ashwin Bharambe, Cormac Herley, Venkat Padmanabhan
July 2005
Understanding and Deconstructing BitTorrent Performance
Ashwin Bharambe, Cormac Herley, Venkata N. Padmanabhan, Venkat Padmanabhan
MSR-TR-2004-142 | December 2004
-
When does Targeting make sense for an attacker?
IEEE Security and Privacy magazine | January 2013
Why Do Nigerian Scammers Say They are From Nigeria?
WEIS | June 2012
The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes
Joseph Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
IEEE Symp. Security and Privacy | May 2012
Why do Nigerian Scammers Say They are from Nigeria?
WEIS | January 2012
Where Do All the Attacks Go?
Dinei Florencio, Cormac Herley
MSR-TR-2011-74 | June 2011
Where Do Security Policies Come From?
Dinei Florencio, Cormac Herley
SOUPS | June 2010
SOUPS Best paper award
The Plight of the Targeted Attacker in a World of Scale
WEIS | January 2010
One Time Password Access to Any Server without Changing the Server
Dinei Florencio, Cormac Herley
September 2008
-
Is Everything We Know About Password Stealing Wrong?
Dinei Florencio, Cormac Herley
IEEE Security and Privacy magazine | January 2012
Is Everything We Know About Password-Stealing Wrong?
Dinei Florencio, Cormac Herley
MSR-TR-2011-132 | December 2011
Phishing and Money Mules
Dinei Florencio, Cormac Herley
WIFS | January 2010
ARGOS: Automatically extracting Repeating Objects from multimedia Streams
MSR-TR-2004-02 | February 2006
IEEE/ACM Transactions on Networking
Occlusion Removal with Minimum Number of Images
October 2005
Recursive Method to Detect and Segment Multiple Rectangular Objects in Scanned Images
MSR-TR-2004-01 | January 2004
Recursive Method to Extract Rectangular Objects from Scans
October 2003
-
A Large-Scale Study of File Prevalance
MSR-TR-2011-131 | November 2011
-
Nobody Sells Gold for the Price of Silver: Dishonesty, Uncertainty and the Underground Economy
Cormac Herley, Dinei Florencio
MSR-TR-2009-34 | June 2009
A Profitless Endeavor: Phishing as Tragedy of the Commons
Cormac Herley, Dinei Florencio
Proceedings in the New Security Paradigms Workshop | September 2008
-
A Robust Link-Translating Proxy Server Mirroring the Whole Web
Ziqing Mao, Cormac Herley
MSR-TR-2008-165 | November 2008
-
Accurate Repeat Finding and Object Skipping Using Fingerprints
November 2005
Stopping a Phishing Attack, Even when the Victims Ignore Warnings
Dinei Florencio, Cormac Herley
October 2005
Why Watermarking is Nonsense
September 2002
-
Publications by Type
-
Minimum Rate Sampling and Reconstruction of Signals with Arbitrary Frequency Support
July 1999
A Large-Scale Measurement of Cybercrime Against Individuals
Casey Breen, Cormac Herley, Elissa M. Redmiles
CHI 2022 | April 2022
The Unfalsifiability of Security Claims
Proceedings of the 3rd Asian Symposium on Programming Languages and Systems (APLAS '05) | May 2016
Security, Cybercrime and Scale
September 2014
Telepathwords: Preventing Weak Passwords by Reading Users’ Minds
Saranga Komanduri, Rich Shay, Lorrie Cranor, Cormac Herley, Stuart Schechter
Proceedings of the 23rd USENIX Security Symposium | August 2014
Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts
Dinei Florencio, Cormac Herley, Paul C. van Oorschot
Usenix Security | August 2014
Breaking our password hash habit: Why the sharing of users’ password choices for defensive analysis is an underprovisioned social good, and what we can do to encourage it.
Cormac Herley, Stuart Schechter
Workshop on the Economics of Information Security | June 2013
You Needn’t Build That: Reusable Ethics-Compliance Infrastructure for Human Subjects Research
Cristian Bravo-Lillo, Serge Egelman, Cormac Herley, Stuart Schechter, Janice Tsai
Cyber-security Research Ethics Dialog & Strategy Workshop (CREDS 2013) | May 2013
Does My Password Go up to Eleven? The Impact of Password Meters on Password Selection
Serge Egelman, Andreas Sotirakopoulos, Ildar Muslukhov, Konstantin Beznosov, Cormac Herley
Proc. CHI | January 2013
Detecting Malicious Landing Pages in Malware Distribution Networks
Gang Wang, Jack W. Stokes, Cormac Herley, David Felstead
IEEE DSN | January 2013
Why Do Nigerian Scammers Say They are From Nigeria?
WEIS | June 2012
The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes
Joseph Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
IEEE Symp. Security and Privacy | May 2012
Why do Nigerian Scammers Say They are from Nigeria?
WEIS | January 2012
Painless Migration from Passwords to Two Factor Authentication
Ziqing Mao, Dinei Florencio, Cormac Herley
WIFS | November 2011
WIFS
Popularity is Everything: A new approach to protecting passwords from statistical-guessing attacks
Stuart Schechter, Cormac Herley, Michael Mitzenmacher
The 5th USENIX Workshop on Hot Topics in Security (HotSec '10) | August 2010
This paper scheduled to be made public 12:01AM, July 19.
Where Do Security Policies Come From?
Dinei Florencio, Cormac Herley
SOUPS | June 2010
SOUPS Best paper award
Phishing and Money Mules
Dinei Florencio, Cormac Herley
WIFS | January 2010
The Plight of the Targeted Attacker in a World of Scale
WEIS | January 2010
One Time Password Access to Any Server without Changing the Server
Dinei Florencio, Cormac Herley
September 2008
A Profitless Endeavor: Phishing as Tragedy of the Commons
Cormac Herley, Dinei Florencio
Proceedings in the New Security Paradigms Workshop | September 2008
Can “Something You Know” be Saved?
Baris Coskun, Cormac Herley
Proc. 11th Information Security Conference (ISC 2008) | September 2008
Evaluating a Trial Deployment of Password Re-Use for Phishing Prevention
Dinei Florencio, Cormac Herley
Proc. Anti-phishing Working Group 2nd Annual eCrime Researchers Summit | October 2007
Do Strong Web Passwords Accomplish Anything?
Dinei Florencio, Cormac Herley, Baris Coskun
Proc. Second USENIX Workshop on Hot Topics in Security (HotSec '07) | August 2007
A Large-Scale Study of Web Password Habits
Dinei Florencio, Cormac Herley
Proceedings of the 16th international conference on the World Wide Web | May 2007
KLASSP: Entering Passwords on a Spyware Infected Machine Using a Shared-Secret Proxy
Dinei Florencio, Cormac Herley
December 2006
Password Rescue: A New Approach to Phishing Prevention
Dinei Florencio, Cormac Herley
July 2006
Analyzing and Improving Anti-Phishing Schemes
Dinei Florencio, Cormac Herley
May 2006
Analyzing and Improving a BitTorrent Network’s Performance Mechanisms
Ashwin Bharambe, Cormac Herley, Venkata N. Padmanabhan, Venkat Padmanabhan
April 2006
Inferring Similarity Between Music Objects with Application to Playlist Generation
Robert Ragno, Chris J.C. Burges, Cormac Herley
November 2005
Accurate Repeat Finding and Object Skipping Using Fingerprints
November 2005
Occlusion Removal with Minimum Number of Images
October 2005
Stopping a Phishing Attack, Even when the Victims Ignore Warnings
Dinei Florencio, Cormac Herley
October 2005
Some Observations on BitTorrent Performance
Ashwin Bharambe, Cormac Herley, Venkat Padmanabhan
July 2005
Detection and Deterrence of Counterfeiting of Valuable Documents
October 2004
Recursive Method to Extract Rectangular Objects from Scans
October 2003
Why Watermarking is Nonsense
September 2002
-
Pushing on string: the “don’t care” region of password strength
Dinei Florencio, Cormac Herley
Communications ACM | September 2016
Passwords and the Evolution of Imperfect Authentication
Joe Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
Communications of ACM | June 2015
An Administrator’s Guide to Internet Password Research
Dinei Florencio, Cormac Herley, Paul C. van Oorschot
Usenix LISA | November 2014
FUD: A Plea for Intolerance
Dinei Florencio, Cormac Herley, Adam Shostack
Communications ACM | June 2014
More is Not the Answer
IEEE Security and Privacy magazine | January 2014
When does Targeting make sense for an attacker?
IEEE Security and Privacy magazine | January 2013
Small World: Collisions Among Attackers in a Finite Population
WEIS | January 2013
Why Do Nigerian Scammers Say They are From Nigeria?
WEIS | June 2012
Is Everything We Know About Password Stealing Wrong?
Dinei Florencio, Cormac Herley
IEEE Security and Privacy magazine | January 2012
A Research Agenda Acknowledging the Persistence of Passwords
Cormac Herley, Paul van Oorschot
IEEE Security & Privacy Magazine | January 2012
Passwords: If We’re So Smart, Why Are We Still Using Them?
Cormac Herley, P.C. van Oorschot, Andrew S. Patrick
Proc. Financial Crypto | January 2009
-
Is Everything We Know About Password-Stealing Wrong?
Dinei Florencio, Cormac Herley
MSR-TR-2011-132 | December 2011
A Large-Scale Study of File Prevalance
MSR-TR-2011-131 | November 2011
Sex, Lies and Cyber-crime Surveys
Dinei Florencio, Cormac Herley
MSR-TR-2011-75 | June 2011
Where Do All the Attacks Go?
Dinei Florencio, Cormac Herley
MSR-TR-2011-74 | June 2011
Nobody Sells Gold for the Price of Silver: Dishonesty, Uncertainty and the Underground Economy
Cormac Herley, Dinei Florencio
MSR-TR-2009-34 | June 2009
So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users
MSR-TR-2009-46 | April 2009
NSPW
A Robust Link-Translating Proxy Server Mirroring the Whole Web
Ziqing Mao, Cormac Herley
MSR-TR-2008-165 | November 2008
Protecting Financial Institutions from Brute-Force Attacks
Cormac Herley, Dinei Florencio
MSR-TR-2007-132 | September 2008
Proceedings of the 1999 Haskell Workshop
Do Strong Web Passwords Accomplish Anything?
Dinei Florencio, Cormac Herley, Baris Coskun
MSR-TR-2007-64 | June 2007
KLASSP: Enterring Passwords from a Spyware Infected Machine
Dinei Florencio, Cormac Herley
MSR-TR-2006-74 | December 2006
A Large Scale Study of Web Password Habits
Dinei Florencio, Cormac Herley
MSR-TR-2006-166 | November 2006
How to Login from an Internet Cafe Without Worrying about Keyloggers
Dinei Florencio, Cormac Herley
MSR-TR-2006-12 | July 2006
ARGOS: Automatically extracting Repeating Objects from multimedia Streams
MSR-TR-2004-02 | February 2006
IEEE/ACM Transactions on Networking
Understanding and Deconstructing BitTorrent Performance
Ashwin Bharambe, Cormac Herley, Venkata N. Padmanabhan, Venkat Padmanabhan
MSR-TR-2004-142 | December 2004
Recursive Method to Detect and Segment Multiple Rectangular Objects in Scanned Images
MSR-TR-2004-01 | January 2004
-
Economics and the Underground Economy
Cormac Herley, Dinei Florencio
July 2009
Black Hat