Skip to main content
Cybersecurity @ BYU

Research Articles

data-content-type=""

Where Is Cybersecurity? An Analysis of U.S. State Hazard Mitigation and Emergency Plans

Authors: Kendel Woodburn, Shydra Murray, Amanda Hughes

Citation: Proceedings of the International ISCRAM Conference, 23 (2026).

Read Article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Engineered Persuasion: Evaluating Personalized Pretexts in LLM-Generated Spear Phishing

Authors: Jerson Francia, Derek Hansen, Benjamin Schooley, Shydra Valynn Murray
Citation: arXiv preprint arXiv:2609.04410 (2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

ASN1spect: Uncovering ASN.1 Compiler-Generated Vulnerabilities in Critical Infrastructure

Authors: Seaver Thorn, Nathaniel Bennett, Kevin Butler, Patrick Traynor, William Enck
Citation: Proceedings of the 2026 ACM Secure Development Conference (SecDev 2026), 13 pages (2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Fizzle: A Framework for Deterministic and Reproducible Network Fuzzing

Authors: Nathaniel Bennett, Tyler Tucker, Carson Stillman, William Enck, Patrick Traynor, Kevin R. B. Butler
Citation: Proceedings of the IEEE Symposium on Security and Privacy (S&P 2026), pp. 2868–2884 (2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Devilray: A Reconfigurable Adversarial Baseline for Revealing Blind Spots in Fake Base Station Detection

Authors: Taekkyung Oh, Duckwoo Kim, Hansung Bae, Beomseok Oh, CheolJun Park, Tyler Tucker, Nathaniel Bennett, Sangwook Bae, Byeongdo Hong, Patrick Traynor, Yongdae Kim
Citation: arXiv preprint arXiv:2605.19232 (2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Practical Attacks on AFC Clients in Wi-Fi Access Points

Authors: Yilu Dong, Tianchang Yang, Nathaniel Bennett, Arupjyoti Bhuyan, Syed Rafiul Hussain
Citation: Dynamic and Innovative Spectrum Sharing (DISS 2026) Workshop, co-located with IEEE DySPAN 2026, pp. 1–4 (2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

On the Security of 6 GHz Automated Frequency Coordination (AFC)

Authors: Nathaniel Bennett, Arupjyoti Bhuyan, Nicholas J. Kaminski
Citation: Workshop on Security and Privacy of Next-Generation Networks (FutureG 2026), co-located with NDSS 2026.
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Healthcare Cybersecurity

Authors: Benjamin Schooley, Tonia San Nicolas-Rocca
Citation: Information Technology for Healthcare Leaders, 10th ed., pp. 85–112 (2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Passkeys in the Wild: A Systematic Study of FIDO2 User Experience Consistency Across Websites

Authors: Bernhardt Ramat, Dave Kartchner, Michael Clark, Kent Seamons
Citation: Proceedings of the 22nd Symposium on Usable Privacy and Security (SOUPS 2026), pp. 21–39.
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Assessing AI-Generated vs. Human-Authored Spear Phishing SMS Attacks: An Empirical Study

Authors: Jerson Francia, Derek Hansen, Benjamin Schooley, Matthew Taylor, Shydra Valynn Murray, Rebekah Cornelius, Greg Snow
Citation: Journal of Cybersecurity and Privacy, 6(4), 129 (2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Human-Centered Threat Modeling in Practice: Lessons, Challenges, and Paths Forward

Authors: Warda Usman, Yixin Zou, Daniel Zappala
Citation: Proceedings of the IEEE Symposium on Security and Privacy (2026), pp. 848–866.
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Understanding Gendered Experiences of Harassment Among Pakistani Young Adults Using Human-Centered Threat Modeling

Authors: Warda Usman, Taha, Saba Iqbal, Amna Batool, Daniel Zappala
Citation: Proceedings of the ACM Conference on Human Factors in Computing Systems (CHI 2026).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Reproducibility in Applied Security Conferences: An 11-Year Review on Artifacts and Evaluation Committees

Authors: Daniel Olszewski, Allison Lu, Anna Crowder, Nathaniel Bennett, Seth Layton, Sri Hrushikesh Varma Bhupathiraju, Tyler Tucker, Siddhant Kalgutkar, Hunter Ver Helst, Carson Stillman, Kevin R. B. Butler, Sara Rampazzi, Patrick Traynor
Citation: Proceedings of the 3rd ACM Conference on Reproducibility and Replicability (ACM REP 2025), pp. 96–107 (2025).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Detecting IMSI-Catchers by Characterizing Identity Exposing Messages in Cellular Traffic

Authors: Tyler Tucker, Nathaniel Bennett, Martin Kotuliak, Simon Erni, Srdjan Capkun, Kevin Butler, Patrick Traynor
Citation: Proceedings of the Network and Distributed System Security Symposium (NDSS 2025).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Document Encryption in Practice: A Comparative Framework and Evaluation

Authors: Isaac Henry Teuscher, Benjamin Schooley
Citation: Proceedings of the 2025 ACM Symposium on Document Engineering (DocEng 2025), pp. 1–4 (2025).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

On Best Erasure Wiretap Codes: Equivocation Matrices and Design Principles

Authors: Willie K. Harrison, Truman Welling, Andrew Swain, Morteza Shoushtari
Citation: Entropy, 27(12), 1245 (2025).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Passwords and FIDO2 Are Meant To Be Secret: A Practical Secure Authentication Channel for Web Browsers

Authors: Anuj Gautam, Tarun Kumar Yadav, Garrett Smith, Kent E. Seamons, Scott Ruoti
Citation: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security (CCS 2025), pp. 1859–1873.
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=
data-content-type=""

Modeling DNS Queries and Caching to Evaluate the Merits of QNAME Minimization

Authors: Casey Deccio, Robert Richardson, Nathaniel Bennett, Nathan Craddock
Citation: Proceedings of the 33rd IEEE International Conference on Network Protocols (ICNP 2025).
Read article
overrideBackgroundColorOrImage= overrideTextColor= promoTextAlignment= overrideCardHideSection= overrideCardHideByline= overrideCardHideDescription= overridebuttonBgColor= overrideButtonText= promoTextAlignment=