IMDEA Networks
User Publications
Your Signal, Their Data: An Empirical Privacy Analysis of Wireless-scanning SDKs in Android
Aniketh Girish, Joel Reardon, Juan Tapiador, Srdjan Matic, Narseo Vallina-Rodríguez
Privacy Enhancing Technologies Symposium (was International Workshop of Privacy Enhancing Technologies). Washington, DC, USA. July 2025
Beneath the surface: An analysis of OEM customizations on the Android TLS protocol stack
Vinuri Bandara, Stijn Pletinckx, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna, Juan Tapiador, Narseo Vallina-Rodríguez
IEEE European Symposium on Security and Privacy. Venice, Italy. June 2025
An extended review of Reversing the Virtual Maze: An Overview of the Technical and Methodological Challenges for Metaverse App Analysis
Alfonso Rodriguez Barredo-Valenzuela, Sergio Pastrana, Narseo Vallina-Rodríguez, Guillermo Suarez-Tangil
pp. 12 , IMDEA Networks Institute. June 2025
DeExp: Revealing Model Vulnerabilities for Spatio-Temporal Mobile Traffic Forecasting with Explainable AI (Accepted for publication)
Serly Moghadas Gholian, Claudio Fiandrino, Narseo Vallina-Rodríguez, Marco Fiore, Joerg Widmer
IEEE Transactions on Mobile Computing. IEEE. January 2025
Reversing the Virtual Maze: An Overview of the Technical and Methodological Challenges for Metaverse App Analysis
Alfonso Rodríguez Barredo De Valenzuela, Sergio Pastrana, Narseo Vallina-Rodríguez, Guillermo Suarez-Tangil
IEEE MetaCom. Hong Kong, China. August 2024
ReviewingWar: Unconventional User Reviews as a Side Channel to Circumvent Information Controls
Jose Miguel Moreno, Sergio Pastrana, Jens Helge Reelfs, Pelayo Vallina, Savas Zannettou, Andriy Panchenko, Georgios Smaragdakis, Oliver Hohlfeld, Narseo Vallina-Rodríguez, Juan Tapiador
International AAAI Conference on Web and Social Media. Buffalo, NY, USA. June 2024
Reviewing War: Unconventional User Reviews as a Side Channel to Circumvent Information Controls
Jose Miguel Moreno, Sergio Pastrana, Jens Helge Reelfs, Pelayo Vallina, Savas Zannettou, Andriy Panchenko, Georgios Smaragdakis, Oliver Hohlfeld, Narseo Vallina-Rodríguez, Juan Tapiador
Proceedings of the International AAAI Conference on Web and Social Media. 10.1609/icwsm.v18i1.31374. Volume 18 , May 2024
In the Room Where It Happens: Characterizing Local Communication and Threats in Smart Homes (Poster)
Aniketh Girish, Tianrui Hu, Vijay Prakash, Daniel J. Dubois, Srdjan Matic, Danny Yuxing Huang, Serge Egelman, Joel Reardon, Juan Tapiador, David Choffnes, Narseo Vallina-Rodríguez
Usenix Network and Distributed System Security Symposium. San Diego, California. February 2024
In the Room Where It Happens: Characterizing Local Communication and Threats in Smart Homes
Aniketh Girish, Tianrui Hu, Vijay Prakash, Daniel J. Dubois, Srdjan Matic, Danny Yuxing Huang, Serge Egelman, Joel Reardon, Juan Tapiador, David Choffnes, Narseo Vallina-Rodríguez
Internet Measurement Conference. Montreal, Canada. October 2023
Log: It’s Big, It’s Heavy, It’s Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem
Allan Lyons, Julien Gamba, Austin Shawaga, Joel Reardon, Juan Tapiador, Serge Egelman, Narseo Vallina-Rodríguez
Usenix Security Symposium. Anaheim, CA, USA. August 2023
Not Your Average App: A Large-scale Privacy Analysis of Android Browsers
Amogh Pradeep, Álvaro Feal, Julien Gamba, Ashwin Rao, Martina Lindorfer, Narseo Vallina-Rodríguez, David Choffnes
Privacy Enhancing Technologies Symposium (was International Workshop of Privacy Enhancing Technologies). Laussane, Switzerland. July 2023
Chrowned by an Extension: Abusing the Chrome DevTools Protocol through the Debugger API
Jose Miguel Moreno, Juan Tapiador, Narseo Vallina-Rodríguez
https://doi.org/10.48550/arXiv.2305.11506. IEEE European Symposium on Security and Privacy. Delft, Netherlands. July 2023
Mules and Permission Laundering in Android: Dissecting Custom Permissios in the Wild
Julien Gamba, Álvaro Feal, Eduardo Blázquez, Vinuri Bandara, Abbas Razaghpanah, Juan Tapiador, Narseo Vallina-Rodríguez
IEEE Transactions on Dependable and Secure Computing. 10.1109/TDSC.2023.3288981. IEEE. June 2023
Your Code is 0000: An Analysis of the Disposable Phone Numbers Ecosystem
Jose Miguel Moreno, Srdjan Matic, Narseo Vallina-Rodríguez, Juan Tapiador
Network Traffic Measurement and Analysis Conference. Naples, Italy. June 2023
Mixed Signals: Analyzing Software Attribution Challenges in the Android Ecosystem
Kaspar Hageman, Álvaro Feal, Julien Gamba, Aniketh Girish, Jakob Bleier, Martina Lindorfer, Juan Tapiador, Narseo Vallina-Rodríguez
IEEE Transactions on Software Engineering. January 2023
An analysis of fake social media engagement services
David Nevado-Catalán, Sergio Pastrana, Narseo Vallina-Rodríguez, Juan Tapiador
Computers & Security. Volume 124 , Elsevier. January 2023
Challenges in inferring privacy properties of smart devices: Towards scalable multi-vantage point testing methods
Aniketh Girish, Vijay Prakash, Serge Egelman, Joel Reardon, Juan Tapiador, Danny Yuxing Huang, Srdjan Matic, Narseo Vallina-Rodríguez
ACM International Conference on Emerging Networking Experiments and Technologies. Rome, Italy. December 2022
Paying Attention to the Algorithm Behind the Curtain. Bringing Transparency to YouTube’s Demonetization Algorithms
Arun Dunna, Katherine Keith, Ethan Zuckerman, Narseo Vallina-Rodríguez, Brendan O'connor, Rishab Nithyanand
ACM Conference on Computer Supported Cooperative Work. Online Event. November 2022
Towards an extensible privacy analysis framework for Smart Homes (Poster)
Aniketh Girish, Juan Tapiador, Srdjan Matic, Narseo Vallina-Rodríguez
Internet Measurement Conference. Nice, France. October 2022
A Comparative Analysis of Certificate Pinning in Android & iOS
Amogh Pradeep, Muhammad Talha Paracha, Protick Bhowmick, Ali Davanian, Razaghpanah Abbas, Taejoong Chung, Martina Lindorfer, Narseo Vallina-Rodríguez, Dave Levin, David Choffnes
Internet Measurement Conference. Nice, France. October 2022