Google Scholar

2025

• The Challenges and Opportunities with Cybersecurity Regulations: A Case Study of the US Electric Power Sector
  Sena Sahin, Burak Sahin, Robert Berthier, Kate Davis, Saman Zonouz, and Frank Li
  ACM Conference on Computer and Communications Security (CCS) 2025 [To Appear]
  


• A Sea of Cyber Threats: Maritime Cybersecurity from the Perspective of Mariners
  Anna Raymaker, Akshaya Kumar, Miuyin Yong Wong, Ryan Pickren, Animesh Chhotaray, Frank Li, Saman Zonouz, and Raheem Beyah
  ACM Conference on Computer and Communications Security (CCS) 2025 [To Appear]
  


• Evaluating Privacy Policies under Modern Privacy Laws At Scale: An LLM-Based Automated Approach
  Qinge Xie, Karthik Ramakrishnan, and Frank Li
  USENIX Security Symposium 2025
  


• Understanding IPv6 Aliases and Detection Methods
  Mert Erdemir, Frank Li, and Paul Pearce
  Passive and Active Measurement Conference (PAM) 2025
  


• Was This You? Investigating the Design Considerations for Suspicious Login Notifications
  Sena Sahin, Burak Sahin, and Frank Li
  Network and Distributed System Security Symposium (NDSS) 2025
  



2024

• Whatcha Lookin' At: Investigating Third-Party Web Content in Popular Android Apps
  Dhruv Kuchhal, Karthik Ramakrishnan, and Frank Li
  ACM Internet Measurement Conference (IMC) 2024
  


• Unmasking the Security and Usability of Password Masking
  Yuqi Hu, Suood Al Roomi, Sena Sahin, and Frank Li
  Distinguished Paper Award
  ACM Conference on Computer and Communications Security (CCS) 2024
  


• Release the Hounds! Automated Inference and Empirical Security Evaluation of Field-Deployed PLCs using Active Network Data
  Ryan Pickren, Animesh Chhotaray, Frank Li, Saman Zonouz, and Raheem Beyah
  ACM Conference on Computer and Communications Security (CCS) 2024
  


• Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content
  Qinge Xie, Manoj Vignesh Kasi Murali, Paul Pearce, and Frank Li
  USENIX Security Symposium 2024
  


• 6SENSE: Internet-Wide IPv6 Scanning and its Security Applications
  Grant Williams, Mert Erdemir, Amanda Hsu, Shraddha Bhat, Abhishek Bhaskar, Frank Li, and Paul Pearce
  USENIX Security Symposium 2024
  


• I Experienced More than 10 DeFi Scams: On DeFi Users' Perception of Security Breaches and Countermeasures
  Mingyi Liu, Jun Ho Huh, HyungSeok Han, Jaehyuk Lee, Jihae Ahn, Frank Li, Hyoungshick Kim, and Taesoo Kim
  USENIX Security Symposium 2024
  


• Comparing Malware Evasion Theory with Practice: Results from Interviews with Expert Analysts
  Miuyin Yong Wong, Matthew Landen, Frank Li, Fabian Monrose, and Mustaque Ahamad
  USENIX Symposium on Usable Privacy and Security (SOUPS) 2024
  


• A First Look At NAT64 Deployment In-The-Wild
  Amanda Hsu, Frank Li, Paul Pearce, and Oliver Gasser
  Passive and Active Measurement Conference (PAM) 2024
  


• Crawling to the Top: An Empirical Evaluation of Top List Use
  Qinge Xie and Frank Li
  Passive and Active Measurement Conference (PAM) 2024
  



2023

• Measuring Website Password Creation Policies At Scale (extended version)
  Suood Al Roomi and Frank Li
  ACM Conference on Computer and Communications Security (CCS) 2023
  


• Evaluating the Security Posture of Real-World FIDO2 Deployments
  Dhruv Kuchhal, Muhammad Saad, Adam Oest, and Frank Li
  ACM Conference on Computer and Communications Security (CCS) 2023
  


• A Large-Scale Measurement of Website Login Policies
  Suood Al Roomi and Frank Li
  USENIX Security Symposium 2023
  


• Investigating the Password Policy Practices of Website Administrators
  Sena Sahin, Suood Al Roomi, Tara Poteat, and Frank Li
  IEEE Symposium on Security and Privacy (S&P) 2023
  


• Fiat Lux: Illuminating IPv6 Apportionment with Different Datasets
  Amanda Hsu, Frank Li, and Paul Pearce
  ACM SIGMETRICS 2023
  

2022

• Building an Open, Robust, and Stable Voting-Based Internet Domain Top List
  Qinge Xie, Shujun Tang, Xiaofeng Zheng, Qingran Lin, Baojun Liu, Haixin Duan, and Frank Li
  USENIX Security Symposium 2022
  


• A View into YouTube View Fraud
  Dhruv Kuchhal and Frank Li
  ACM Web Conference (WWW) 2022
  



2021

• Don't Forget the Stuffing! Revisiting the Security Impact of Typo-Tolerant Password Authentication
  Sena Sahin and Frank Li
  ACM Conference on Computer and Communications Security (CCS) 2021
  


• Knock and Talk: Investigating Local Network Communications on Websites
  Dhruv Kuchhal and Frank Li
  ACM Internet Measurement Conference (IMC) 2021
  


• Who You Gonna Call? An Empirical Evaluation of Website security.txt Deployment
  Tara Poteat and Frank Li
  ACM Internet Measurement Conference (IMC) 2021
  


• Cleaning the NVD: Comprehensive Quality Assessment, Improvements, and Analyses
  Afsah Anwar, Ahmed Abusnaina, Songqing Chen, Frank Li, and David Mohaisen
  IEEE Transactions on Dependable and Secure Computing (TDSC) 2021
  
• 
  Deep Entity Classification: Abusive Account Detection for Online Social Networks
  Teng Xu, Gerard Goossen, Huseyin Kerem Cevahir, Sara Khodeir, Yingyezhe Jin, Frank Li, Shawn Shan, Sagar Patel, David Freeman, and Paul Pearce
  USENIX Security Symposium 2021
  

2020

• Towards A User-Level Understanding of IPv6 Behavior
  Frank Li and David Freeman
  ACM Internet Measurement Conference (IMC) 2020
  


• Shim Shimmeny: Evaluating the Security and Privacy Contributions of Link Shimming
  Frank Li
  USENIX Security Symposium 2020
  


• IoT Inspector: Crowdsourcing Labeled Network Traffic from Smart Home Devices at Scale
  Danny Yuxing Huang, Noah Apthorpe, Frank Li, Gunes Acar, and Nick Feamster
  ACM International Joint Conference on Pervasive and Ubiquitous Computing (UbiComp/IMWUT) 2020
  

2019

• Remedying Security Concerns at an Internet Scale
  Frank Li
  PhD Thesis, UC Berkeley
  


• Keepers of the Machines: Examining How System Administrators Manage Software Updates For Multiple Machines
  Frank Li, Lisa Rogers, Arunesh Mathur, Nathan Malkin, and Marshini Chetty
  Distinguished Paper Award
  USENIX Symposium on Usable Privacy and Security (SOUPS) 2019
  


• Fixing HTTPS Misconfigurations at Scale: An Experiment with Security Notifications
  Eric Zeng, Frank Li, Emily Stark, Adrienne Porter Felt, and Parisa Tabriz
  Workshop on the Economics of Information Security (WEIS) 2019
  

2018

• Web-based Attacks to Discover and Control Local IoT Devices
  Gunes Acar, Danny Yuxing Huang, Frank Li, Arvind Narayanan, and Nick Feamster
  ACM SIGCOMM Workshop on IoT Security and Privacy (IoT S&P) 2018
  


• Didn't You Hear Me? —Towards More Successful Web Vulnerability Notifications
  Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, and Christian Rossow
  Network and Distributed System Security Symposium (NDSS) 2018
  

2017

• A Large-Scale Empirical Study of Security Patches
  Frank Li and Vern Paxson
  Invited to appear in USENIX ;login:, Spring 2018 Issue (Invited Article)
  ACM Conference on Computer and Communications Security (CCS) 2017
  


• Data Breaches, Phishing, or Malware? Understanding the Risks of Stolen Credentials
  Kurt Thomas, Frank Li, Ali Zand, Jake Barrett, Juri Ranieri, Eric Severance, Luca Invernizzi, Yarik Markov, Oxana Comanescu, Vijay Eranti, Angelika Moscicki, Dan Margolis, Vern Paxson, and Elie Bursztein
  ACM Conference on Computer and Communications Security (CCS) 2017
  


• Target Generation for Internet-Wide IPv6 Scanning
  Austin Murdock, Frank Li, Paul Bramsen, Zakir Durumeric, and Vern Paxson
  Finalist for Best Paper Award
  ACM Internet Measurement Conference (IMC) 2017
  


• Global Measurement of DNS Manipulation
  Paul Pearce, Ben Jones, Frank Li, Roya Ensafi, Nick Weaver, Nick Feamster, and Vern Paxson
  Invited to appear in USENIX ;login:, Winter 2017 Issue (Invited Article)
  USENIX Security Symposium 2017
  


• Augur: Internet-Wide Detection of Connectivity Disruptions
  Paul Pearce, Roya Ensafi, Frank Li, Nick Feamster, and Vern Paxson
  Invited to appear in the IEEE Security & Privacy Magazine, 2018 Special Issue (Invited Article)
  IEEE Symposium on Security and Privacy (S&P/Oakland) 2017
  


• MiniCrypt: Reconciling Encryption and Compression for Big Data Stores
  Wenting Zheng, Frank Li, Raluca Ada Popa, Ion Stoica, and Rachit Agarwal
  EuroSys 2017
  

2016

• You've Got Vulnerability: Exploring Effective Vulnerability Notifications
  Frank Li, Zakir Durumeric, Jakub Czyz, Mohammad Karami, Damon McCoy, Stefan Savage, Michael Bailey, and Vern Paxson
  USENIX Security Symposium 2016
  


• Remedying Web Hijacking: Notification Effectiveness and Webmaster Comprehension
  Frank Li, Grant Ho, Eric Kuan, Yuan Niu, Lucas Ballard, Kurt Thomas, Elie Bursztein and Vern Paxson
  World Wide Web Conference (WWW) 2016
  

2015

• Exploring Privacy Preservation in Outsourced K-Nearest Neighbors with Multiple Data Owners
  Frank Li, Richard Shin, and Vern Paxson
  ACM Cloud Computing Security Workshop (CCSW) 2015 - colocated with ACM CCS
  

2014

• The Matter of Heartbleed
  Zakir Durumeric*, Frank Li*, James Kasten, Nicholas Weaver, Johanna Amann, Jethro Beekman, Mathias Payer, David Adrian, Vern Paxson, Michael Bailey, and J. Alex Halderman
  *Co-first authors
  Best Paper Award
  ACM Internet Measurement Conference (IMC) 2014
  


• Consequences of Connectivity: Characterizing Account Hijacking on Twitter
  Kurt Thomas, Frank Li, Chris Grier, and Vern Paxson
  ACM Conference on Computer and Communications Security (CCS) 2014
  

2013

• Data-confined HTML5 Applications
  Devdatta Akhawe, Frank Li, Warren He, Prateek Saxena, and Dawn Song
  European Symposium on Research in Computer Security (ESORICS) 2013
  


• An Ideal-Security Protocol for Order-Preserving Encoding (extended version)
  Raluca Ada Popa, Frank Li, and Nickolai Zeldovich
  IEEE Symposium on Security and Privacy (S&P/Oakland) 2013
  

2012

• SybilControl: Practical Sybil Defense with Computational Puzzles
  Frank Li, Prateek Mittal, Matthew Caesar, and Nikita Borisov
  ACM Workshop on Scalable Trusted Computing (STC) 2012 - colocated with ACM CCS
  

2011

• Privacy and Accountability for Location-Based Aggregate Statistics (extended version)
  Raluca Ada Popa, Andrew Blumberg, Hari Balakrishnan, and Frank Li
  ACM Conference on Computer and Communications Security (CCS) 2011