Accepted Papers
The following papers have been selected to appear at WPES 2026. See the
Program for the session schedule.
Full Papers
- Cache to the Future: A Distributed Webpage Archive for Internet Blackouts
Ross Evans (University of Waterloo), Diogo Barradas (University of Waterloo)
- Comparing Privacy-Preserving Revocation for the EUDI Wallet
Andrea Flamini (Hasso Plattner Institute, University of Potsdam), Anja Lehmann (Hasso-Plattner-Institute, University of Potsdam), Giada Sciarretta (Fondazione Bruno Kessler), Mario Scuro (Fondazione Bruno Kessler), Nicola Smaniotto (University of Trento), Alessandro Tomasi (Fondazione Bruno Kessler), Silvio Ranise (University of Trento and Fondazione Bruno Kessler)
- From Permissionless to Permission-Based Fingerprinting: Quantifying the Impact of Android Permissions on Device Fingerprinting
Sihem Bouhenniche (Univ. Lille, CNRS, Inria), Pierre Laperdrix (CNRS, Univ. Lille, Inria), Walter Rudametkin (Univ. Rennes, Inria, CNRS, IRISA, IUF)
- GazeLeak: Passcode Inference Against Eye-tracking XR Devices Through External Observation
Hwanjo Heo (ETRI), Junhee Lee (Chungbuk National University), Jinwoo Kim (Chungbuk National University)
- Going Faster: Privacy-Preserving Shortest Paths from Start to End
Vincent Ehrmanntraut (RWTH Aachen University), Ulrike Meyer (RWTH Aachen University)
- JsRipper: Enabling In-Browser, Signature-Based Tracking Function Detection and Blocking
Romain Fouquet (Inria), Pierre Laperdrix (CNRS, Univ. Lille, Inria), Romain Rouvoy (Univ. Lille, Inria)
- Leaked in Translation: Measuring and Mitigating Sensitive Data Exposure to Third-Party Services via Browser-Based Translation
Tianlang Xie (Radboud University), Xavier de Carné de Carnavalet (Radboud University)
- Machination: An Application-Agnostic Framework for Black-Box WebRTC Testing
Nico Heitmann (Paderborn University), Lukas Knittel (Ruhr University Bochum), Juraj Somorovsky (Paderborn University), Jörg Schwenk (Ruhr University Bochum)
- Machine-in-the-Tunnel: Practical Connection Inference, DNS Injection, and Defenses for Modern VPNs
Beau Kujath (Arizona State University), William Tolley (Breakpointing Bad, Hampden-Sydney College), Jedidiah R. Crandall (Arizona State University)
- Multidimensional Evaluation of LLM-Generated MPC Programs
Kou Matsuda (Waseda University), Kana Shimizu (Waseda University)
- Neural Architecture Search for Adaptive Website Fingerprinting
Gurjot Singh (University of Waterloo), Rob Jansen (U.S. Naval Research Laboratory), Diogo Barradas (University of Waterloo)
- Out of Tune: How Different Fine-Tuning Methods Affect Information Security
Joseph Moretto (UVA), Hunter Moore (UVA)
- Private SCT Auditing, Revisited
Lena Heimberger (Graz University of Technology), Christopher Patton (Cloudflare), Bas Westerbaan (Cloudflare)
- Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective
Georgi Ganev (UCL & SAS), Emiliano De Cristofaro (UC Riverside)
- Side Attack: Off-Path Website Fingerprinting via Cross-Circuit Interference in Tor
Mohamed Farrag Gad (Hof University of Applied Sciences), Sebastian Pahl (Independent Researcher), Stefan Gast (Graz University of Technology), Daniel Gruss (Graz University of Technology), Florian Adamsky (Hof University of Applied Sciences)
- Sociotechnical Aspects of Tor Relay Rejection
Jules Dejaeghere (University of Namur), Lionel Goffaux (University of Namur), Pierre Luycx (University of Namur), Hosam Elkoulak (University of Namur), Florentin Rochet (University of Namur)
- Supporting Private and Efficient Consumer Requests to Data Brokers
Elina van Kempen (University of California, Irvine), Pavel Frolikov (University of California, Irvine), Chloe Georgiou (University of California, Irvine), Gene Tsudik (University of California, Irvine)
- Toward privacy-preserving crowd-flow estimation based on camera detections
Fatemeh Marzani (University of Twente), Thijs van Ede (University of Twente), Geert Heijenk (University of Twente), Maarten van Steen (University of Twente)
- Verifiable Blind Pseudonymization via Polymorphic Encryption using Zero-Knowledge Proofs
Job Doesburg (Radboud University), Bernard van Gastel (Radboud University), Erik Poll (Radboud University)
Short Papers
- A Large-Scale Privacy Analysis of Android Education Apps
Rakibul Hasan (Arizona State University)
- Homomorphic Functional Encryption: Trustless Key Derivation for Functional Encryption
Camille Nuoskala (Tampere University), Hossein Abdinasibfar (Tampere University), Mélina Hadjeres (Tampere University), Antonis Michalas (Tampere University)
- It's Not Just a Phase: Understanding Function Dependence in MPC Preprocessing
Andreas Brüggemann (Technical University of Darmstadt), Kasra Edalatnejad (Technical University of Darmstadt), Jan Filipp (Technical University of Darmstadt), Philipp Kusterer (Technical University of Darmstadt), Thomas Schneider (Technical University of Darmstadt)
- Making Sense of Consent: A Feasibility Study on Simplifying Cookie Banners with Plain Language
Minela Bećirović (TU Braunschweig), Ha Dao (Max-Planck-Institute for Informatics), Mannat Kaur (Max-Planck-Institute for Informatics), Martin Johns (TU Braunschweig), Alexandra Dirksen (University of Twente)
- Modular Traffic Shaping for Censorship Evasion
Aaron Johnson (US Naval Research Laboratory), Rob Jansen (U.S. Naval Research Laboratory)
- Punching Down: Deflation Attacks on the Tor Network
Ran Tao (Georgetown University), Ryan Wails (Stealth Software Technologies, Inc.), Cameron Daly (Georgetown University), James Trombo (Georgetown University), Micah Sherr (Georgetown University), Benjamin E. Ujcich (Georgetown University)
- Recovering GTP-U Secrets behind NAT for Practical 5G Network Attacks
Wei Lin (Singapore University of Technology and Design), Binbin Chen (Singapore University of Technology and Design)
- Self-Defeating Privacy: Privacy Coins as a Blockchain Liability
Danielle Movsowitz Davidow (Tel-Aviv University), Eran Toch (Tel Aviv University)