-
Notifications
You must be signed in to change notification settings - Fork 0
/
index.html
174 lines (160 loc) · 10.8 KB
/
index.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
<html>
<head>
<title>David G. Balash</title>
</head>
<body style="
background:
linear-gradient(-90deg, rgba(178,206,193,.1) 2px, transparent 2px),
linear-gradient(rgba(178,206,193,.1) 2px, transparent 2px),
linear-gradient(-90deg, rgba(178,206,193,.11) 2px, transparent 2px),
linear-gradient(rgba(178,206,193,.11) 2px, transparent 2px),
linear-gradient(transparent 3px, #ecf3de 3px, #ecf3de 78px, transparent 78px),
linear-gradient(-90deg, transparent 3px, #ecf3de 3px, #ecf3de 78px, transparent 78px),
#ecf3de;
background-size:
24px 24px,
24px 24px,
120px 120px,
120px 120px,
120px 120px,
120px 120px,
120px 120px,
120px 120px;">
<table>
<tr>
<td>
<img src="david.jpg" style="width: 232px;"/>
</td>
<td width="2%"></td>
<td nowrap>
<dl>
<dd>
<div style="padding-top:16px; font-size: 28px; color: #383428;">
David G. Balash
</div>
</dd>
<dd style="padding-top:8px">
<img src="richmondemail.png" style="width: 300px;"/>
</dd>
<dd style="padding-top:8px; color: #383428;">
<a href = "https://scholar.google.com/citations?user=uCx7_V0AAAAJ&hl=en">Google Scholar</a>, <a href="https://github.com/DavidBalash">GitHub</a>, <a href="https://www.linkedin.com/in/davidbalash">LinkedIn</a>, <a href="balash_cv.pdf">CV</a>
</dd>
</dl>
</td>
</tr>
</table>
<div style="padding-top:16px; width: 620px; font-size: 20px; color: #383428;">
Hello, and welcome to my web page. I am an assistant professor of computer science at <a href="https://www.richmond.edu/">University of Richmond</a>. My scholarly activities contribute to the area of usable security and privacy, which focuses on human factors in security, a discipline at the intersection of human computer interaction and computer security. Research problems in usable security ask questions not just about how to measure and design secure systems but also about how humans, as users and designers of these systems, play a fundamental role in their security. I am also pursuing new research that will investigate the emergent risks around bias, security and privacy that arise from artificial intelligence and machine learning systems.
</div>
<hr>
<div style="color: #383428;">
<h2>News</h2>
<table>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Apr 24</b></td>
<td>New paper on <a href="https://petsymposium.org/popets/2024/popets-2024-0055.pdf">Privacy impacts of Advertising Inferences</a> accepted in PoPETs '24.<td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Nov 23</b></td>
<td>New poster on <a href="https://dl.acm.org/doi/10.1145/3576915.3624383">Apple's Privacy Label Ecosystem</a> accepted in CCS '23.<td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Aug 23</b></td>
<td>Presented our work on <a href="https://www.usenix.org/conference/usenixsecurity23/presentation/balash">S&P impacts of Exam Proctoring</a> at USENIX Security '23 in Anaheim, CA.<td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>May 23</b></td>
<td>Presented our work on <a href="">Privacy label consumer impact</a> at <a href="https://cactus-colloquium.github.io/">CACTUS/P</a> in College Park, MD.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Dec 22</b></td>
<td>Presented our work on <a href="">Ad inferneces</a> at <a href="https://cactus-colloquium.github.io/2022/12/02/index.html">CACTUS/P</a> Pittsburgh, PA.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Aug 22</b></td>
<td>Presented our work on <a href="https://www.usenix.org/conference/usenixsecurity22/presentation/balash">API Privacy</a> at USENIX Security '22 in Boston, MA.<td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Jul 22</b></td>
<td>New paper on <a href="https://www.usenix.org/system/files/usenixsecurity23-balash.pdf">S&P impacts of Exam Proctoring</a> accepted at USENIX Security '23.<td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Jun 22</b></td>
<td>Awarded <a href="https://blogs.gwu.edu/designingtrustworthyaisystems">Design of Trustworthy AI and Future Work Systems</a> NSF PhD Fellowship.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>May 22</b></td>
<td>Presented our work on <a href="https://arxiv.org/abs/2206.02658">Privacy Labels</a> at <a href="https://cactus-colloquium.github.io/">CACTUS/P</a> in Washington, DC.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Dec 21</b></td>
<td>Presented our work on <a href="https://www.usenix.org/conference/usenixsecurity22/presentation/balash">API Privacy</a> at <a href="https://cactus-colloquium.github.io/2021/12/14/index.html">CACTUS/P</a> in College Park, Maryland.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Sep 21</b></td>
<td>New paper on <a href="https://www.usenix.org/conference/usenixsecurity22/presentation/balash">API Privacy</a> accepted at USENIX Security '22.<td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Aug 21</b></td>
<td>Co-presented our work <a href="https://www.usenix.org/conference/usenixsecurity21/presentation/farke">Privacy Dashboards</a> at USENIX Security '21.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Aug 21</b></td>
<td>Presented our work on <a href="https://www.usenix.org/conference/soups2021/presentation/balash">Exam Privacy</a> at SOUPS '21.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>May 21</b></td>
<td>New paper on <a href="https://www.usenix.org/conference/soups2021/presentation/balash">Exam Privacy</a> accepted at SOUPS '21.</td>
</tr>
<tr>
<td style="font-family:monospace, serif; font-size: 15px; padding-right: 8px;"><b>Apr 21</b></td>
<td>New paper on <a href="https://www.usenix.org/conference/usenixsecurity21/presentation/farke">Privacy Dashboards</a> accepted at USENIX Security '21.</td>
</tr>
</table>
</div>
<hr>
<div style="color: #383428;">
<h2>Current Research</h2>
<div style="width: 600px; color: #383428;">
<b>Privacy Dashboards</b><br/>
Privacy dashboards and transparency tools help users review and manage the data collected about them online. We seek to understand how privacy dashboards and transparency tools affect concerns about and benefits from data collection.
</div>
<div style="padding-top:10px; width: 600px; color: #383428;">
<b>App-Based Privacy Nutrition Labels</b><br/>
The ubiquitous surveillance and data collection regime embedded within modern web and mobile ecosystems has led to several interventions meant to empower users to make choices to restrict and manage their privacy. Privacy nutrition labels offer an approach that is modeled after food nutrition labeling. Like a food label, a privacy nutrition label describes the data collection and usage practices of a service. The standardization of privacy labels offers a unique opportunity for a comprehensive study of the self-reported data collection and use policies of an entire app ecosystem.
</div>
<div style="padding-top:10px; width: 600px; color: #383428;">
<b>API Privacy</b><br/>
Online services like Google provide a variety of application programming interfaces. These online APIs enable authenticated third-party services and applications to access a user's account data for tasks such as single sign-on, calendar integration, and sending email on behalf of the user, among others. Despite their prevalence, API access could pose significant privacy and security risks, where a third-party could have unexpected privileges to a user's account.
</div>
<div style="padding-top:10px; width: 600px; color: #383428;">
<b>Security and Privacy Implications of Remote Proctoring</b><br/>
The problem of how to perform student assessment in an online environment has become increasingly relevant, leading many institutions and educators to turn to online proctoring services to administer remote exams. These services employ various student monitoring methods to curb cheating, including restricted browser modes, video/screen monitoring, local network traffic analysis, and eye tracking. We explore the security and privacy perceptions of the student test-takers being proctored.
</div>
</div>
<hr>
<div style="color: #383428;">
<h2>Publications</h2>
Florian Farke, <b>David G. Balash</b>, Maximilian Golla, and Adam J. Aviv.<br/>
<a href="https://petsymposium.org/popets/2024/popets-2024-0055.pdf">How Does Connecting Online Activities to Advertising Inferences Impact Privacy Perceptions?</a>.<br/>
Proceedings on Privacy Enhancing Technologies 2024 (PoPETs '24). Apr 2024.
<p>
<b>David G. Balash</b>, Rahel A. Fainchtein, Elena Korkes, Miles Grant, Micah Sherr, and Adam J. Aviv.<br/>
<a href="https://www.usenix.org/system/files/usenixsecurity23-balash.pdf">Educators' Perspectives of Using (or Not Using) Online Exam Proctoring</a>.<br/>
32nd USENIX Security Symposium (USENIX Security 23). Aug 2023.
<p>
<b>David G. Balash</b>, Xiaoyuan Wu, Miles Grant, Irwin Reyes, and Adam J. Aviv.<br/>
<a href="https://www.usenix.org/system/files/sec22-balash.pdf">Security and Privacy Perceptions of Third-Party Application Access for Google Accounts</a>.<br/>
31st USENIX Security Symposium (USENIX Security 22). Aug 2022.
<p>
<b>David G. Balash</b>, Dongkun Kim, Darika Shaibekova, Rahel A. Fainchtein, Micah Sherr, and Adam J. Aviv.<br/>
<a href="https://www.usenix.org/system/files/soups2021-balash.pdf">Examining the Examiners: Students' Privacy and Security Perceptions of Online Proctoring Services</a>.<br/>
17th Symposium on Usable Security and Privacy (SOUPS '21). Aug 2021.
<p>
Florian Farke, <b>David G. Balash</b>, Maximilian Golla, Markus Dürmuth, and Adam J. Aviv.<br/>
<a href="https://www.usenix.org/system/files/sec21-farke.pdf">Are Privacy Dashboards Good for End Users? Evaluating User Perceptions and Reactions to Google's My Activity</a>.<br/>
30th USENIX Security Symposium (USENIX Security '21). USENIX Association. Aug 2021.
<p>
</div>
</body>
</html>