Workshop on Privacy in the Electronic Society

Program

WPES 2026 will be held on November 15, 2026 in The Hague, The Netherlands, in conjunction with ACM CCS 2026.

• JsRipper: Enabling In-Browser, Signature-Based Tracking Function Detection and Blocking
  Romain Fouquet (Inria), Pierre Laperdrix (CNRS, Univ. Lille, Inria), Romain Rouvoy (Univ. Lille, Inria)
• Leaked in Translation: Measuring and Mitigating Sensitive Data Exposure to Third-Party Services via Browser-Based Translation
  Tianlang Xie (Radboud University), Xavier de Carné de Carnavalet (Radboud University)
• From Permissionless to Permission-Based Fingerprinting: Quantifying the Impact of Android Permissions on Device Fingerprinting
  Sihem Bouhenniche (Univ. Lille, CNRS, Inria), Pierre Laperdrix (CNRS, Univ. Lille, Inria), Walter Rudametkin (Univ. Rennes, Inria, CNRS, IRISA, IUF)
• GazeLeak: Passcode Inference Against Eye-tracking XR Devices Through External Observation
  Hwanjo Heo (ETRI), Junhee Lee (Chungbuk National University), Jinwoo Kim (Chungbuk National University)

10:15 — 10:30  Coffee Break

• Out of Tune: How Different Fine-Tuning Methods Affect Information Security [Recorded]
  Joseph Moretto (UVA), Hunter Moore (UVA)

• Machination: An Application-Agnostic Framework for Black-Box WebRTC Testing
  Nico Heitmann (Paderborn University), Lukas Knittel (Ruhr University Bochum), Juraj Somorovsky (Paderborn University), Jörg Schwenk (Ruhr University Bochum)
• Machine-in-the-Tunnel: Practical Connection Inference, DNS Injection, and Defenses for Modern VPNs
  Beau Kujath (Arizona State University), William Tolley (Breakpointing Bad, Hampden-Sydney College), Jedidiah R. Crandall (Arizona State University)
• Neural Architecture Search for Adaptive Website Fingerprinting
  Gurjot Singh (University of Waterloo), Rob Jansen (U.S. Naval Research Laboratory), Diogo Barradas (University of Waterloo)
• Side Attack: Off-Path Website Fingerprinting via Cross-Circuit Interference in Tor
  Mohamed Farrag Gad (Hof University of Applied Sciences), Sebastian Pahl (Independent Researcher), Stefan Gast (Graz University of Technology), Daniel Gruss (Graz University of Technology), Florian Adamsky (Hof University of Applied Sciences)
• Sociotechnical Aspects of Tor Relay Rejection
  Jules Dejaeghere (University of Namur), Lionel Goffaux (University of Namur), Pierre Luycx (University of Namur), Hosam Elkoulak (University of Namur), Florentin Rochet (University of Namur)
• Recovering GTP-U Secrets behind NAT for Practical 5G Network Attacks [Short]
  Wei Lin (Singapore University of Technology and Design), Binbin Chen (Singapore University of Technology and Design)
• Punching Down: Deflation Attacks on the Tor Network [Short]
  Ran Tao (Georgetown University), Ryan Wails (Stealth Software Technologies, Inc.), Cameron Daly (Georgetown University), James Trombo (Georgetown University), Micah Sherr (Georgetown University), Benjamin E. Ujcich (Georgetown University)

12:40 — 13:25  Lunch

• Verifiable Blind Pseudonymization via Polymorphic Encryption using Zero-Knowledge Proofs
  Job Doesburg (Radboud University), Bernard van Gastel (Radboud University), Erik Poll (Radboud University)
• Private SCT Auditing, Revisited
  Lena Heimberger (Graz University of Technology), Christopher Patton (Cloudflare), Bas Westerbaan (Cloudflare)
• Supporting Private and Efficient Consumer Requests to Data Brokers
  Elina van Kempen (University of California, Irvine), Pavel Frolikov (University of California, Irvine), Chloe Georgiou (University of California, Irvine), Gene Tsudik (University of California, Irvine)
• Comparing Privacy-Preserving Revocation for the EUDI Wallet
  Andrea Flamini (Hasso Plattner Institute, University of Potsdam), Anja Lehmann (Hasso-Plattner-Institute, University of Potsdam), Giada Sciarretta (Fondazione Bruno Kessler), Mario Scuro (Fondazione Bruno Kessler), Nicola Smaniotto (University of Trento), Alessandro Tomasi (Fondazione Bruno Kessler), Silvio Ranise (University of Trento and Fondazione Bruno Kessler)
• Toward privacy-preserving crowd-flow estimation based on camera detections
  Fatemeh Marzani (University of Twente), Thijs van Ede (University of Twente), Geert Heijenk (University of Twente), Maarten van Steen (University of Twente)
• Going Faster: Privacy-Preserving Shortest Paths from Start to End
  Vincent Ehrmanntraut (RWTH Aachen University), Ulrike Meyer (RWTH Aachen University)

15:10 — 15:25  Coffee Break

• Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective
  Georgi Ganev (UCL & SAS), Emiliano De Cristofaro (UC Riverside)
• Multidimensional Evaluation of LLM-Generated MPC Programs
  Kou Matsuda (Waseda University), Kana Shimizu (Waseda University)
• Cache to the Future: A Distributed Webpage Archive for Internet Blackouts
  Ross Evans (University of Waterloo), Diogo Barradas (University of Waterloo)

• It's Not Just a Phase: Understanding Function Dependence in MPC Preprocessing [Short]
  Andreas Brüggemann (Technical University of Darmstadt), Kasra Edalatnejad (Technical University of Darmstadt), Jan Filipp (Technical University of Darmstadt), Philipp Kusterer (Technical University of Darmstadt), Thomas Schneider (Technical University of Darmstadt)
• Homomorphic Functional Encryption: Trustless Key Derivation for Functional Encryption [Short]
  Camille Nuoskala (Tampere University), Hossein Abdinasibfar (Tampere University), Mélina Hadjeres (Tampere University), Antonis Michalas (Tampere University)
• Modular Traffic Shaping for Censorship Evasion [Short]
  Aaron Johnson (US Naval Research Laboratory), Rob Jansen (U.S. Naval Research Laboratory)
• Self-Defeating Privacy: Privacy Coins as a Blockchain Liability [Short]
  Danielle Movsowitz Davidow (Tel-Aviv University), Eran Toch (Tel Aviv University)
• Making Sense of Consent: A Feasibility Study on Simplifying Cookie Banners with Plain Language [Short]
  Minela Bećirović (TU Braunschweig), Ha Dao (Max-Planck-Institute for Informatics), Mannat Kaur (Max-Planck-Institute for Informatics), Martin Johns (TU Braunschweig), Alexandra Dirksen (University of Twente)
• A Large-Scale Privacy Analysis of Android Education Apps [Short]
  Rakibul Hasan (Arizona State University)