About Me

I am a professor at the Ruhr University Bochum (RUB), where I lead the Digital Sovereignty Lab – in short: DigiSoul. We investigate digital sovereignty, the capacity of individuals (e.g., end-users or developers), institutions (e.g., universities or companies) or states (e.g., administrations or governments) for informational self-determination.

Since 2022, I am a principal investigator (PI) in the DFG-funded Cluster of Excellence CASA “Securing the Digital Society”, which currently is in its second funding phase. Furthermore, I am a member of the Council for Ethics and Responsibility of the University Alliance Ruhr, and the University Commission for Diversity.

Before joining RUB, I was a junior professor at the Leibniz University in Hannover at the chair Human-Centered Security of Prof. Sascha Fahl and a postdoctoral researcher in GIST research section at the University of Glasgow, UK. Since 2020, I hold a PhD in Computer Science from the Technical University of Darmstadt.

Check out the CASA stories video about my lab, the Nackgehackt podcast on online voting or digital sovereignty.

Interested in a comic of our research, take a look here, or download it as PDF here. More information about the comic and options to order it can be found on the CASA website.


🠶 Find me also at:

Selected Recent Activities

🠶 For a full list, click here.

🠶 Chair roles
  • Paper & Technical Program Chair at MUM 2026
  • Poster Chair at SOUPS 2026
  • Vice Chair at Usenix Security 2027
  • General Chair at AHs ’23 & ’24
  • Workshop Chair at MuC 2023
🠶 Program Committees
  • Associate Chair of CHI 2021, 2022, 2023, 2024, 2025, 2026, 2027
  • PC Member of SOUPS 2024, 2025, 2026
  • PC Member of Usenix Security 2025, 2026
  • PC Member of PETS 2026, 2027
  • PC Member of CCS 2025, 2026
  • PC Member of MUM 2022, 2023, 2024, 2025

Awards & Recognition

  • Honourable Mention Award at CHI 2025 & 2026
  • Distinguished Reviewer Award at Usenix Security 2025
  • Best Reviewer Award at ICALT 2023
  • Honourable Mention Award at MUM 2021
  • Honourable Mention Award at MuC 2021

Selected Recent Publications

🠶 For a full list, click here.

2026
  • Szczepaniak, Justin, Verena Zimmermann, Karola Marky. “Let Me Take That Back”: Designing and Testing Deletion Interfaces for Human-AI Interaction, In: Proceedings of Mensch und Computer 2026. 145-156. ACM.
    🔗 Database
  • Kanyu Chen, Rebecca Panskus, Erwin Wu, Yichen Peng, Daichi Saito, Emiko Kamiyama, Ruiteng Li, Chen-Chieh Liao, Karola Marky, Kato Akira, Hideki Koike, Kai Kunze. Sensing Your Vocals: Exploring the Activity of Vocal Cord Muscles for Pitch Assessment Using Electromyography and Ultrasonography, In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI). ACM.
    🔗 Database | 🏆 Honourable Mention Award
  • Priyasha Chatterjee, Smirity Kaushik, Karola Marky, Yixin Zou. It Shouldn’t Be This Difficult: Researcher Perspectives on Diversity and Inclusion in Usable Privacy and Security Research, In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI). ACM.
    🔗 Database

  • 2025
  • Lena Swienty, Rebecca Panskus, Stefanie Miketta, Beyza Kircili, Sen Cheng, Karola Marky. Investigating User Perceptions of Visualising Inferred Sensitive Information as Privacy Avatars, In: Proceedings of the 24th International Conference on Mobile and Ubiquitous Multimedia (MUM). ACM.
    🔗 Database
  • Reyhan Düzgün, Philip Klostermeyer, Lena Swienty, Sascha Fahl, Karola Marky. Towards Secure and Usable XR Authentication Schemes for Head-Mounted Displays: A Co-Creation Study with Experts, In: ACM Symposium on Virtual Reality Software and Technology (VRST).
    🔗 Database
  • Sarah Abdelwahab Gaballah, Lamya Abdullah, Ephraim Zimmer, Sascha Fahl, Max Mühlhäuser, Karola Marky. “It’s Not My Data Anymore”: Exploring Non-Users’ Privacy Perceptions of Medical Data Donation Apps, In: Proceedings on Privacy Enhancing Technologies (PETS), 2025(1), 654-670.
    🔗 Database
  • Noé Zufferey, Sarah Abdelwahab Gaballah, Karola Marky, Verena Zimmermann. “AI is from the devil.” Behaviors and Concerns Toward Personal Data Sharing with LLM-based Conversational Agents. In: Proceedings on Privacy Enhancing Technologies (PETS), 2025(3), 5-28.
    🔗 Database
  • Sarah Delgado Rodriguez, Maximiliane Windl, Florian Alt, Karola Marky. The TaPSI Research Framework – A Systematization of Knowledge on Tangible Privacy and Security Interfaces, In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI).
    📼 Presentation | 🔗 Database
  • Jan-Ulrich Holtgrave, Sabrina Klivan, Karola Marky, Sascha Fahl. A Qualitative Study of Adoption Barriers and Challenges for Passwordless Authentication in German Public Administrations, In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI).
    🔗 Database
  • Felix Reichmann, Jens Christian Opdenbusch, Karola Marky, Marco Gutfleisch. Security Knight in Shining Armor: What and Who VPN Providers Claim to Shield Consumers Against, In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI). ACM.
    🔗 Database
  • Verena Zimmermann, Stina Schäfer, Markus Dürmuth, Karola Marky. Authenticate As You Go: From Exploring Smart Home Authentication with Daily Objects to Authenticating with Primary Tasks, In: ACM Transactions on Computer-Human Interaction (TOCHI). ACM.
    🔗 Database

  • 2024
  • Jonas Hielscher, Markus Schöps, Jens Opdenbusch, Felix Reichmann, Marco Gutfleisch, Karola Marky, and Simon Parkin. Selling Satisfaction: A Qualitative Analysis of Cybersecurity Awareness Vendors’ Promises, In: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM.
    🔗 Database
  • Karola Marky, Nina Gerber, Henry John Krumb, Mohamed Khamis and Max Mühlhäuser. Investigating Voter Perceptions of Printed Physical Audit Trails for Online Voting, In: Proceedings of the IEEE Symposium on Security and Privacy (SP). IEEE.
    🔗 Database
  • Sabrina Amft, Sandra Höltervennhoff, Rebecca Panskus, Karola Marky, and Sascha Fahl. Everyone for Themselves? A Qualitative Study about Individual Security Setups of Open Source Software, In: Proceedings of the IEEE Symposium on Security and Privacy (SP). IEEE.
    🔗 Database
  • Sarah Abdelwahab Gaballah, Lamya Abdullah, Mina Alishahi, Thanh Hoang Long Nguyen, Ephraim Zimmer, Max Mühlhäuser, and Karola Marky. Anonify: Decentralized Dual-level Anonymity for Medical Data Donation, In: Privacy Enhancing Technologies Symposium (PETS), 2024(4).
    🔗 Database
  • Habiba Farzand, Melvin Abraham, Stephen Brewster, Mohamed Khamis, and Karola Marky. A Systematic Deconstruction of Human-Centric Privacy & Security Threats on Mobile Phones, In: International Journal of Human–Computer Interaction. Taylor & Francis.
    🔗 Database
  • Sarah Delgado Rodriguez, Priyasha Chatterjee, Anh Dao Phuong, Florian Alt, and Karola Marky. Do You Need to Touch? Exploring Correlations between Personal Attributes and Preferences for Tangible Privacy Mechanisms, In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI). ACM.
    📼 Presentation | 🔗 Database | 🏆 Honourable Mention Award
  • Karola Marky, Alina Stöver, Sarah Prange, Kira Bleck, Paul Gerber, Verena Zimmermann, Florian Müller, Florian Alt, and Max Mühlhäuser. Decide Yourself or Delegate – User Preferences Regarding the Autonomy of Personal Privacy Assistants in Private IoT-Equipped Environments, In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI). ACM.
    📹 Video | 🔗 Database
  • Habiba Farzand, Karola Marky and Mohamed Khamis. Out-of-Device Privacy Unveiled: Designing and Validating the Out-of-Device Privacy Scale (ODPS), In: Proceedings of the CHI Conference on Human Factors in Computing Systems (CHI). ACM.
    📹 Video | 🔗 Database

  • 2023
  • Karola Marky, Shaun MacDonald, Yasmeen Abdrabou, and Mohamed Khamis. In the Quest to Protect Users from Side-Channel Attacks — A User-Centred Design Space to Mitigate Thermal Attacks on Public Payment Terminals, In: Proceedings of the Usenix Security Symposium. Usenix Association.
    📰 PDF | 📼 Presentation | 🔗 Database
  • Mark Turner, Martin Schmitz, Morgan Masichi Bierey, Mohamed Khamis and Karola Marky. Tangible 2FA – An In-the-Wild Investigation of User-Defined Tangibles for Two-Factor Authentication. In: Proceedings of the Usenix Symposium on Usable Privacy and Security (SOUPS). Usenix Association.
    📰 PDF | 📼 Presentation | 🔗 Database
  • Rebecca Panskus, Max Ninow, Sascha Fahl and Karola Marky. Privacy Mental Models of Electronic Health Records: A German Case Study. In: Proceedings of the Usenix Symposium on Usable Privacy and Security (SOUPS). Usenix Association.
    🔗 Database
  • Verena Zimmermann, Karola Marky and Karen Renaud. Hybrid password meters for more secure passwords — A comprehensive study of password meters including nudges and password information, In: Behaviour & Information Technology. Taylor & Francis.
    🔗 Database
  • Jiawen Han, George Chernyshov, Moe Sugawa, Dingding Zheng, Danny Hynds, Taichi Furukawa, Marcelo Padovani Macieira, Karola Marky, Kouta Minamizawa, Jamie A Ward and Kai Kunze. Linking audience physiology to choreography, In: ACM Transactions on Computer-Human Interaction (TOCHI). ACM.
    🔗 Database