@inproceedings{mn25,
  author = {Mandal, Prianka and Nadkarni, Adwait},
  title = {{“We can’t change it overnight”: Understanding Industry Perspectives on IoT Product Security Compliance and Certification}},
  booktitle = {Proceedings of the 2025 IEEE Symposium on Security and Privacy (S&P 2025)},
  year = {2025},
  month = may,
  note = {To appear},
  pdf = {/downloads/mandal-oakland25.pdf}
}

@inproceedings{xnl24,
  author = {Xiao, Yue and Nadkarni, Adwait and Liao, Xiaojing},
  title = {{Enhancing Transparency and Accountability of TPLs with PBOM: A Privacy Bill of Materials}},
  booktitle = {Proceedings of the 2024 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED 2024)},
  year = {2024},
  month = oct,
  pdf = {},
  note = {To appear}
}

@inproceedings{mao+24,
  author = {Mandal, Prianka and Ami, Amit Seal and Olaiya, Victor and Razmjo, Sayyed Hadi and Nadkarni, Adwait},
  title = {{“Belt and suspenders” or “just red tape”?: Investigating Early Artifacts and User Perceptions of IoT App Security Certification}},
  booktitle = {Proceedings of the 2024 USENIX Security Symposium (USENIX)},
  year = {2024},
  month = aug,
  pdf = {/downloads/mandal-sec24.pdf}
}

@inproceedings{kja+24,
  author = {Kafle, Kaushal and Jagtap, Kirti and Ahmed-Rengers, Mansoor and Jaeger, Trent and Nadkarni, Adwait},
  title = {{Practical Integrity Validation in the Smart Home with HomeEndorser}},
  booktitle = {Proceedings of the 2024 ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec 2024)},
  year = {2024},
  month = may,
  pdf = {/downloads/kafle-wisec24.pdf}
}

@inproceedings{kms+24,
  author = {Kafle, Kaushal and Mandal, Prianka and Singh, Kapil and Andow, Benjamin and Nadkarni, Adwait},
  title = {{Understanding the Privacy Practices of Political Campaigns: A Perspective from the 2020 US Election Websites}},
  booktitle = {Proceedings of the 2024 IEEE Symposium on Security and Privacy (S&P)},
  year = {2024},
  month = may,
  pdf = {/downloads/kafle-oakland24.pdf}
}

@inproceedings{ampn24,
  author = {Ami, Amit Seal and Moran, Kevin and Poshyvanyk, Denys and Nadkarni, Adwait},
  title = {{"False negative - that one is going to kill you" - Understanding Industry Perspectives of Static Analysis based Security Testing}},
  booktitle = {Proceedings of the 2024 IEEE Symposium on Security and Privacy (S&P)},
  year = {2024},
  month = may,
  pdf = {/downloads/ami-oakland24.pdf},
  award = {Distinguished Paper Award!}
}

@inproceedings{msn24,
  author = {Manandhar, Sunil and Singh, Kapil and Nadkarni, Adwait},
  title = {{Towards Automated Regulation Analysis for Effective Privacy Compliance}},
  booktitle = {Proceedings of the 2024 Network and Distributed System Security Symposium (NDSS)},
  year = {2024},
  month = feb,
  pdf = {/downloads/manandhar-ndss24.pdf}
}

@inproceedings{mmk+23,
  author = {Mandal, Prianka and Manandhar, Sunil and Kafle, Kaushal and Moran, Kevin and Poshyvanyk, Denys and Nadkarni, Adwait},
  title = {{Helion: Enabling Natural Testing of Smart Homes}},
  booktitle = {Proceedings of the ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE'23), Demonstration Track},
  year = {2023},
  address = {San Francisco},
  month = dec,
  pdf = {/downloads/mandal-fse23-demo.pdf}
}

@inproceedings{asr+23,
  author = {Ami, Amit Seal and Ahmed, Syed Yusuf and Redoy, Radowan Mahmud and Cooper, Nathan and Kafle, Kaushal and Moran, Kevin and Poshyvanyk, Denys and Nadkarni, Adwait},
  title = {{MASC: A Tool for Mutation-based Evaluation of Static Crypto-API Misuse Detectors}},
  booktitle = {Proceedings of the ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE'23), Demonstration Track},
  year = {2023},
  address = {San Francisco},
  month = dec,
  pdf = {/downloads/ami-fse23-demo.pdf}
}

@inproceedings{manandhar-ccs22,
  author = {Jin\*, Xin and Manandhar\*, Sunil and Kafle, Kaushal and Lin, Zhiqiang and Nadkarni, Adwait},
  title = {{Understanding IoT Security from a Market-Scale Perspective}},
  booktitle = {Proceedings of the 29th ACM Conference on Computer and Communications Security (CCS)},
  year = {2022},
  month = nov,
  address = {Los Angeles, CA, USA},
  pdf = {/downloads/manandhar-ccs22.pdf},
  sourcecode = {https://github.com/Secure-Platforms-Lab-W-M/IoTSpotter},
  note = {\*Co-first Authors.}
}

@inproceedings{manandhar-sec22,
  author = {Manandhar, Sunil and Kafle, Kaushal and Andow, Benjamin and Singh, Kapil and Nadkarni, Adwait},
  title = {{“Smart Home Privacy Policies Demystified: A Study of Availability, Content, and Coverage}},
  booktitle = {Proceedings of the 31st USENIX Security Symposium (USENIX)},
  year = {2022},
  month = aug,
  address = {Boston, MA, USA},
  pdf = {/downloads/manandhar-sec22.pdf},
  sourcecode = {https://github.com/Secure-Platforms-Lab-W-M/smart-home-privacy-policies},
  note = {Acceptance rate: 256/1414, 18%}
}

@inproceedings{ami-oakland22,
  author = {Ami, Amit Seal and Cooper, Nathan and Kafle, Kaushal and Moran, Kevin and Poshyvanyk, Denys and Nadkarni, Adwait},
  booktitle = {Proceedings of the 2022 IEEE Symposium on Security and Privacy (S&P)},
  title = {{Why Crypto-detectors Fail: A Systematic Evaluation of Cryptographic Misuse Detection Techniques}},
  year = {2022},
  address = {San Francisco, CA, USA},
  month = may,
  pages = {397--414},
  pdf = {/downloads/ami-oakland22.pdf},
  sourcecode = {https://github.com/Secure-Platforms-Lab-W-M/masc-artifact},
  note = {Acceptance rate: 147/1012, 14.52%}
}

@inproceedings{akm+21-demo,
  author = {Ami, Amit Seal and Kafle, Kaushal and Moran, Kevin and Nadkarni, Adwait and Poshyvanyk, Denys},
  title = {{Demo: Mutation-based Evaluation of Security-focused Static Analysis Tools for Android.}},
  booktitle = {Proceedings of the 43rd IEEE/ACM International Conference on Software Engineering (ICSE'21), Formal Tool Demonstration Track},
  year = {2021},
  address = {Madrid, Spain},
  month = may,
  pdf = {https://ieeexplore.ieee.org/abstract/document/9402554}
}

@article{akm+20,
  author = {Ami, Amit Seal and Kafle, Kaushal and Moran, Kevin and Nadkarni, Adwait and Poshyvanyk, Denys},
  title = {{Systematic Mutation-based Evaluation of the Soundness of Security-focused Android Static Analysis Techniques}},
  journal = {ACM Transactions on Privacy and Security (TOPS)},
  year = {2021},
  month = feb,
  volume = {24},
  number = {15},
  pdf = {/downloads/ami-tops21.pdf}
}

@article{kmm+20,
  author = {Kafle, Kaushal and Moran, Kevin and Manandhar, Sunil and Nadkarni, Adwait and Poshyvanyk, Denys},
  title = {{Security in Centralized Data Store-based Home Automation Platforms: A Systematic Analysis of Nest and Hue}},
  journal = {ACM Transactions on Cyber-Physical Systems (TCPS)},
  year = {2020},
  month = dec,
  volume = {5},
  number = {1},
  pdf = {/downloads/kafle-tcps20.pdf}
}

@inproceedings{mmk+20,
  author = {Manandhar, Sunil and Moran, Kevin and Kafle, Kaushal and Tang, Ruhao and Poshyvanyk, Denys and Nadkarni, Adwait},
  title = {{Towards a Natural Perspective of Smart Homes for Practical Security and Safety Analyses.}},
  booktitle = {Proceedings of the IEEE Symposium on Security \& Privacy (S&P)},
  year = {2020},
  address = {San Francisco, CA, USA},
  month = may,
  pdf = {/downloads/manandhar-oakland20.pdf},
  sourcecode = {https://github.com/helion-security/helion},
  note = {Acceptance rate: 104/841, 12.3%}
}

@inproceedings{kmm+19,
  author = {Kafle, Kaushal and Moran, Kevin and Manandhar, Sunil and Nadkarni, Adwait and Poshyvanyk, Denys},
  title = {{A Study of Data Store-based Home Automation}},
  booktitle = {Proceedings of the 9th ACM Conference on Data and Application Security and Privacy
    (CODASPY)},
  year = {2019},
  address = {Dallas, TX, USA},
  month = mar,
  pages = {73-84},
  pdf = {/downloads/kafle-codaspy19.pdf},
  award = {Best Paper Award!},
  note = {Acceptance rate: 28/119, 23.5%}
}

@inproceedings{gan+19,
  author = {{Gorski III}, Sigmund A and Andow, Benjamin and Nadkarni, Adwait and Manandhar, Sunil and Enck, William and Bodden, Eric and Bartel, Alexandre},
  title = {{ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware}},
  booktitle = {Proceedings of the 9th ACM Conference on Data and Application Security and Privacy
    (CODASPY)},
  year = {2019},
  address = {Dallas, TX, USA},
  month = mar,
  pages = {25-36},
  pdf = {/downloads/gorski-codaspy19.pdf},
  sourcecode = {https://wspr.csc.ncsu.edu/acminer/},
  note = {Acceptance rate: 28/119, 23.5%}
}

@inproceedings{bkm+18,
  author = {Bonett, Richard and Kafle, Kaushal and Moran, Kevin and Nadkarni, Adwait and Poshyvanyk, Denys},
  title = {{Discovering Vulnerabilities in Security-Focused Static Analysis Tools for Android using Systematic Mutation}},
  booktitle = {Proceedings of the 27th USENIX Security Symposium (USENIX)},
  year = {2018},
  address = {Baltimore, MD, USA},
  month = aug,
  pages = {1263-1280},
  pdf = {/downloads/bonett-sec18.pdf},
  sourcecode = {https://secure-platforms-lab-w-m.github.io/muse/},
  note = {Acceptance rate: 100/524, 19%}
}

@patent{asm-patent,
  title = {PROGRAMMABLE INTERFACE FOR EXTENDING SECURITY OF APPLICATION-BASED OPERATING SYSTEM, SUCH AS ANDROID},
  author = {Enck, William Harold and Nadkarni, Adwait and Sadeghi, Ahmad-reza and Heuser, Stephan},
  year = {2018},
  month = mar,
  note = {US Patent US 9,916 ,475 B2}
}

@techreport{pybe-TR,
  title = {{Policy by Example: An Approach for Security Policy Specification}},
  author = {Nadkarni, Adwait and Enck, William and Jha, Somesh and Staddon, Jessica},
  type = {arXiv preprint arXiv:1707.03967},
  year = {2017},
  month = jul,
  pdf = {https://arxiv.org/pdf/1707.03967.pdf}
}

@incollection{nvte17,
  author = {Nadkarni, Adwait and Verma, Akash and Tendulkar, Vasant and Enck, William},
  title = {{Reliable Ad Hoc Smartphone Application Creation for End Users}},
  booktitle = {Intrusion Detection and Prevention for Mobile Ecosystems},
  publisher = {CRC Press},
  isbn = {9781138033573},
  month = jul,
  year = {2017},
  note = {Editor: George Kambourakis and Asaf Shabtai and Konstantinos Kolias and Dimitrios Damopoulos},
  url = {https://www.crcpress.com/Intrusion-Detection-and-Prevention-for-Mobile-Ecosystems/Kambourakis-Shabtai-Kolias-Damopoulos/p/book/9781138033573}
}

@phdthesis{adwait-phd,
  title = {{Towards Practical Data Secrecy in Modern Operating Systems.}},
  school = {North Carolina State University},
  author = {Nadkarni, Adwait},
  year = {2017},
  type = {{PhD} dissertation}
}

@article{swg+16,
  author = {Shu, Rui and Wang, Peipei and Gorski III, Sigmund A and Andow, Benjamin and Nadkarni, Adwait and Deshotels, Luke and Gionta, Jason and Enck, William and Gu, Xiaohui},
  title = {{A Study of Security Isolation Techniques}},
  journal = {ACM Computing Surveys (CSUR)},
  issue_date = {October 2016},
  volume = {49},
  number = {3},
  month = oct,
  year = {2016},
  pdf = {https://dl.acm.org/doi/abs/10.1145/2988545?casa_token=ek-EuLe0JQEAAAAA:gsWBoeL_H9MJZN-249KMiUDnTSkMCDjclq7RBvCqZCtB32pLAtOq9HHnupGuQZnTM0e-Lrb3DQ_eXQ}
}

@inproceedings{naej16,
  author = {Nadkarni, Adwait and Andow, Benjamin and Enck, William and Jha, Somesh},
  title = {{Practical DIFC Enforcement on Android}},
  booktitle = {Proceedings of the 25th USENIX Security Symposium (USENIX)},
  year = {2016},
  address = {Austin, TX, USA},
  month = aug,
  pages = {1119-1136},
  pdf = {/downloads/nadkarni-sec16.pdf},
  sourcecode = {https://wspr.csc.ncsu.edu/weir/},
  note = {Acceptance rate: 72/463, 15.6%}
}

@inproceedings{anb+16,
  author = {Andow, Benjamin and Nadkarni, Adwait and Bassett, Blake and Enck, William and Xie, Tao},
  title = {{A Study of Grayware on Google Play}},
  booktitle = {Proceedings of the IEEE Mobile Security Technologies workshop (MoST)},
  year = {2016},
  address = {San Jose, CA, USA},
  month = may,
  pages = {224-233},
  note = {\textbf{\textit{Acceptance rate: 10/35 $\approx$ 28.6\%}}},
  pdf = {https://ieeexplore.ieee.org/abstract/document/7527773?casa_token=2HcrnGUJBqUAAAAA:0CrRRl5Oh3fAQpRoXYdB8zyoxf5j6wtQwixxV_qWZBptGRuF55bS6fShdGlNaNLcSFMNIzvseyc}
}

@misc{android-fbi,
  author = {Enck, William and Nadkarni, Adwait},
  title = {{What if the FBI tried to crack an Android phone? We attacked one to find out}},
  year = {2016},
  month = mar,
  journal = {The Conversation},
  url = {\Colorhref{https://theconversation.com/what-if-the-fbi-tried-to-crack-an-android-phone-we-attacked-one-to-find-out-56556}}
}

@inproceedings{hnes14,
  author = {Heuser\*, Stephan and Nadkarni\*, Adwait and Enck, William and Sadeghi, Ahmad-Reza},
  title = {{ASM: A Programmable Interface for Extending Android Security}},
  booktitle = {Proceedings of the 23rd USENIX Security Symposium (USENIX)},
  year = {2014},
  month = aug,
  address = {San Diego, CA, USA},
  pages = {1005-1019},
  pdf = {/downloads/heuser-sec14.pdf},
  sourcecode = {http://www.androidsecuritymodules.org},
  note = {\*Co-first Authors, Acceptance rate: 67/350, 19.1%}
}

@techreport{TR-2014-10,
  author = {Nadkarni, Adwait and Sheth, Anmol and Weinsberg, Udi and Taft, Nina and Enck, William},
  title = {{GraphAudit: Privacy Auditing for Massive Graph Mining}},
  address = {Raleigh, NC},
  institution = {North Carolina State University, Department of Computer
  	  Science},
  type = {{Technical Report} TR-2014-10},
  month = aug,
  year = {2014},
  pdf = {https://repository.lib.ncsu.edu/bitstream/handle/1840.4/8595/TR-2014-10.pdf?sequence=1}
}

@inproceedings{nte14,
  author = {Nadkarni, Adwait and Tendulkar, Vasant and Enck, William},
  title = {{NativeWrap: Ad Hoc Smartphone Application Creation for End Users}},
  booktitle = {{Proceedings of the 7th ACM Conference on Security and Privacy in Wireless and Mobile Networks (\underline{WiSec})}},
  year = {2014},
  month = jul,
  address = {Oxford, UK},
  pages = {13-24},
  pdf = {/downloads/nadkarni-wisec14.pdf},
  sourcecode = {https://wspr.csc.ncsu.edu/nativewrap/},
  note = {Acceptance rate: 25/96, 26%}
}

@inproceedings{ne13,
  author = {Nadkarni, Adwait and Enck, William},
  title = {{Preventing accidental data disclosure in modern operating systems}},
  booktitle = {Proceedings of the 2013 ACM Conference on Computer \& Communications Security (\underline{CCS})},
  year = {2013},
  address = {Berlin, Germany},
  month = nov,
  pages = {1029--1042},
  pdf = {/downloads/nadkarni-ccs13.pdf},
  sourcecode = {https://wspr.csc.ncsu.edu/aquifer/},
  note = {Acceptance rate: 105/530, 19.8%}
}

@mastersthesis{adwait-ms,
  title = {{Workflow Based Information Flow Control (IFC) in Modern Operating Systems.}},
  school = {North Carolina State University},
  author = {Nadkarni, Adwait},
  year = {2012}
}