Sabrina Amft, M.Sc.

Hello there!

I am Sabrina, a German PhD Student in Usable Security. I have been working as a researcher at CISPA and the LUH. In the last few years, I have investigated various topics within the field of Usable Security, including the Software Supply Chain, Web Security, Cryptography, and Software Development. However, I’m most passionate about Usable Authentication and Security-Usability Tradeoffs.

While I am currently residing in Hanover, I am currently wrapping up my PhD and am on the Viennese job market!

If you’re interested in my work, hiring me, or just want to chat, feel free to reach out. You can find out more about me or contact me here:

Selected Publications:

• Everyone for Themselves? A Qualitative Study about Individual Security Setups of Open Source Software Contributors Sabrina Amft, Sandra Höltervennhoff, Rebecca Panskus, Karola Marky and Sascha Fahl. In 45th IEEE Symposium on Security and Privacy (S&P'24). 10.1109/SP54263.2024.00182

• ``We've Disabled MFA for You'': An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar and Sascha Fahl. In 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS'23). 10.1145/3576915.3623180

• ``Would You Give the Same Priority to the Bank and a Game? I Do Not!'' Exploring Credential Management Strategies and Obstacles during Password Manager Setup Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Yasemin Acar, and Sascha Fahl. Nineteenth Symposium on Usable Privacy and Security (SOUPS'23). usenix.org

• ``You have to read 50 different RFCs that contradict each other'': An Interview Study on the Experiences of Implementing Cryptographic Standards Nicolas Huaman, Jacques Suray, Jan H. Klemmer, Marcel Fourné, Sabrina Amft, Ivana Trummova, Yasemin Acar, and Sascha Fahl. In 33rd USENIX Security Symposion (USENIX Security'24). Appears in August.

• Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples Harjot Kaur, Sabrina Amft, Daniel Votipka, Yasemin Acar, and Sascha Fahl. In 31st USENIX Security Symposium (USENIX Security'22). usenix.org

• Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications Marten Oltrogge, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes, and Sascha Fahl. In 30th USENIX Security Symposium (USENIX Security'21). usenix.org

• They Would do Better if They Worked Together: The Case of Interaction Problems Between Password Managers and Websites Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, and Sascha Fahl. In 2021 IEEE Symposium on Security and Privacy (S&P'21). 10.1109/SP40001.2021.00094