Demo Data from SIGIR 2026 / reviewers in the wild / expert
Yoshimichi Nakatsuka
dblp:205/8037
· DBLP profile ↗
10ranked-venue papers
3as first author
8since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 6 · 2 first-author · 5 since 2021Computer networks · 4 · 1 first-author · 3 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
8 papers |
Systems and software security · 27% Authentication and access control · 21% Web and mobile security · 14% | |
| Computer networks
3 papers |
Wireless networking · 100% |
Topics — the 5 heaviest of 10, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Authentication and access control › human interactive proofs
CAPTCHA |
1.2 | 2 | 2023 | An Empirical Study & Evaluation of Modern CAPTCHAs · USENIX Security Symposium 2023 CACTI: Captcha Avoidance via Client-side TEE Integration · USENIX Security Symposium 2021 |
Web and mobile security
phishing detection |
0.9 | 1 | 2025 | URL Inspection Tasks: Helping Users Detect Phishing Links in Emails · USENIX Security Symposium 2025 |
Privacy and data protection
regulatory compliance |
0.7 | 1 | 2023 | VICEROY: GDPR-/CCPA-compliant Enforcement of Verifiable Accountless Consumer Requests · NDSS 2023 |
Hardware security and side channels
trusted execution environments |
0.5 | 1 | 2021 | CACTI: Captcha Avoidance via Client-side TEE Integration · USENIX Security Symposium 2021 |
Network security › anonymity networks
traffic analysis resistance |
0.2 | 1 | 2024 | Scrappy: SeCure Rate Assuring Protocol with PrivacY · NDSS 2024 |
Methods — techniques the papers use, named apart from their topics
content analysis · 1.1cryptographic protocol design · 0.8user study · 0.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | URL Inspection Tasks: Helping Users Detect Phishing Links in Emails
Daniele Lain, Yoshimichi Nakatsuka, Kari Kostiainen, Gene Tsudik, Srdjan Capkun |
USENIX Security Symposium | 2 |
| 2024 | Scrappy: SeCure Rate Assuring Protocol with PrivacY
Kosei Akama, Yoshimichi Nakatsuka, Masaaki Sato, Keisuke Uehara |
NDSS | 2 |
| 2023 | VICEROY: GDPR-/CCPA-compliant Enforcement of Verifiable Accountless Consumer Requests
Scott Jordan 0001, Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik |
NDSS | 2 |
| 2023 | An Empirical Study & Evaluation of Modern CAPTCHAs
Andrew Searles, Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik, Ai Enkoji |
USENIX Security Symposium | 2 |
| 2022 | Vronicle: verifiable provenance for videos from mobile devicesabstractDemonstrating veracity of videos is a longstanding problem that has recently become more urgent and acute. It is extremely hard to accurately detect manipulated videos using content analysis, especially in the face of subtle, yet effective, manipulations, such as frame rate changes or skin tone adjustments. Yuxin (Myles) Liu, Yoshimichi Nakatsuka, Ardalan Amiri Sani, Sharad Agarwal, Gene Tsudik |
MobiSys | 2 |
| 2022 | Vronicle: verifiable provenance for videos from mobile devicesabstractAn increasing number of mobile devices are incorporating cameras, allowing users to record videos at any time, anywhere. This opens up a wide variety of applications, most notably security-critical ones, where videos are used as evidence or include sensitive content. Examples of such applications include (but are not limited to): (i) citizen journalists recording important events (e.g., protests), (ii) courts using videos as evidence, and (iii) electronic legal contract-signing platforms using videos to identify signing users [1]. Yuxin (Myles) Liu, Yoshimichi Nakatsuka, Ardalan Amiri Sani, Sharad Agarwal, Gene Tsudik |
MobiSys | 2 |
| 2022 | Vronicle: verifiable provenance for videos from mobile devicesabstractAn increasing number of mobile devices are incorporating cameras, allowing users to record videos at any time, anywhere. This opens up a wide variety of applications, most notably security-critical ones, where videos are used as evidence or include sensitive content. Examples of such applications include (but are not limited to): (i) citizen journalists recording important events (e.g., protests), (ii) courts using videos as evidence, and (iii) electronic legal contract-signing platforms using videos to identify signing users [1]. Yuxin (Myles) Liu, Yoshimichi Nakatsuka, Ardalan Amiri Sani, Sharad Agarwal, Gene Tsudik |
MobiSys | 2 |
| 2021 | CACTI: Captcha Avoidance via Client-side TEE Integration
Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik |
USENIX Security Symposium | 1 |
| 2019 | PDoT: private DNS-over-TLS with TEE supportabstractSecurity and privacy of the Internet Domain Name System (DNS) have been longstanding concerns. Recently, there is a trend to protect DNS traffic using Transport Layer Security (TLS). However, at least two major issues remain: (1) how do clients authenticate DNS-over-TLS endpoints in a scalable and extensible manner; and (2) how can clients trust endpoints to behave as expected? In this paper, we propose a novel Private DNS-over-TLS (PDoT) architecture. PDoT includes a DNS Recursive Resolver (RecRes) that operates within a Trusted Execution Environment (TEE). Using Remote Attestation, DNS clients can authenticate, and receive strong assurance of trustworthiness of PDoT RecRes. We provide an open-source proof-of-concept implementation of PDoT and use it to experimentally demonstrate that its latency and throughput match that of the popular Unbound DNS-over-TLS resolver. Yoshimichi Nakatsuka, Andrew Paverd, Gene Tsudik |
ACSAC | 1 |
| 2018 | FROG: A Packet Hop Count based DDoS Countermeasure in NDNabstractNamed Data Networking (NDN) is a promising inter-networking paradigm that focus on content rather than hosts and their physical locations. In NDN Consumers issue Interests for Contents. Producers generate a content in response to each received interest and such content is routed back to the requesting consumer. When compared to IP, NDN brings advantages such as better throughput and lower latency, because routers are able to cache popular contents and satisfy interests for such contents locally. However, before being considered a viable approach, NDN should offer security services that are ideally better, but at least equivalent to current mechanisms in IP.In this regard, mechanisms to prevent DDoS are of paramount importance. In this work we propose FROG: a simple yet effective Interest Flooding Attack (IFA) detection and mitigation method. FROG runs on routers that are directly connected to NDN consumers and monitors packet hop counts. It then calculates mean and variance using stored hop counts to distinguish attackers from legitimate users. We use the NDN simulator ndnSIM to evaluate FROG's effectiveness. Our results show that FROG improves resilience against DDoS attacks. In particular, during an attack, legitimate users can still receive 75% of requested contents. Without FROG this number decreases to 50%. Yoshimichi Nakatsuka, Janaka Wijekoon, Hiroaki Nishi |
ISCC | 1 |