Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Shradha Neupane

dblp:324/3125 · DBLP profile ↗
← Back
3ranked-venue papers
2as first author
3since 2021 · last 2025
0009-0005-7608-3046ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 2 first-author · 2 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Web and mobile security · 27% Privacy and data protection · 27% Authentication and access control · 27%
Human-computer interaction and pervasive computing
1 paper
Accessibility and assistive technology · 100%
Software engineering, system software, and programming languages
1 paper
Software maintenance and evolution · 100%
Computer networks
1 paper
Internet of things and sensor networks · 100%

Topics — the 8 heaviest of 8, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Accessibility and assistive technology › mobile accessibility
mobile app accessibility
0.912025
A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility · IEEE Trans. Serv. Comput. 2025
Web and mobile security
mobile application security
0.912025
A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility · IEEE Trans. Serv. Comput. 2025
Authentication and access control › access control
permission analysis
0.912025
A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility · IEEE Trans. Serv. Comput. 2025
Privacy and data protection
privacy analysis
0.912025
A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility · IEEE Trans. Serv. Comput. 2025
Systems and software security
software supply chain security
0.712023
Beyond Typosquatting: An In-depth Look at Package Confusion · USENIX Security Symposium 2023
Internet of things and sensor networks
iot devices
0.312025
A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility · IEEE Trans. Serv. Comput. 2025
Software maintenance and evolution › software dependencies › software dependency management
package management
0.212023
Beyond Typosquatting: An In-depth Look at Package Confusion · USENIX Security Symposium 2023
Software maintenance and evolution
software ecosystems
0.212023
Beyond Typosquatting: An In-depth Look at Package Confusion · USENIX Security Symposium 2023

Methods — techniques the papers use, named apart from their topics

empirical study · 2.6measurement study · 1.3
YearPublicationVenuePosition
2025 A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility
abstract
Internet of Things (IoT) devices provide convenience to users by simplifying household tasks. Most IoTs can be remotely controlled via mobile companion apps, which constitute the main interface between devices themselves and their users. Such apps are used to configure, update, and control the device(s) and thus constitute a critical component in the IoT ecosystem. However, they have historically been understudied which prompts us to look into them. In this paper, we report on a study where we evaluated a sample of 455 IoT companion apps and analyze their privacy, security, and accessibility aspects. Our research aim is to understand these metrics, gauge their state and evaluate whether there is a correlation between them. Our primary findings from the analysis are: (i) most apps have reasonable security and accessibility posture, but in several dimensions there exists a long tail of apps with significant problems and (ii) apps tend to over-request permissions which are not related to their main goal. Moreover, the quality of an app along one aspect is uncorrelated to the same along other aspects. We conclude with actionable recommendations for companion app developers.
Faiza Tazi, Suleiman Saka, Shradha Neupane, Ethan Myers, Sanchari Das 0001, Lorenzo De Carli, Indrakshi Ray
IEEE Trans. Serv. Comput.3
2023 Beyond Typosquatting: An In-depth Look at Package Confusion
Shradha Neupane, Grant Holmes, Elizabeth Wyss, Drew Davidson, Lorenzo De Carli
USENIX Security Symposium1
2022 On the Data Privacy, Security, and Risk Postures of IoT Mobile Companion Apps
Shradha Neupane, Faiza Tazi, Upakar Paudel, Freddy Veloz Baez, Merzia Adamjee, Lorenzo De Carli, Sanchari Das 0001, Indrakshi Ray
DBSec1