About
The Security Privacy and Democracy Research (SPDR) Laboratory is an interdisciplinary research group based out of Georgia Tech's College of Computing. We build, break, and measure systems to fight for the future of democracy.
Team
News
-
Shreyas's work on Age Verification has been accepted to IEEE S&P! You can read about it at Ars Technica!
-
Delaney Gomen and Prof. Specter discussed their work on election integrity on Caltech's Election Science Office Hours Podcast!
-
Our security and privacy analysis of Tile has been accepted to Usenix Security `26, and reported on in Wired!
-
Published an open dataset of FTC Privacy actions, and the FTC's reliance on independent security research.
Publications
- Papers, Please: A First Look at Age Verification on the Web
2026 IEEE Symposium on Security and Privacy
- Security and Privacy Analysis of Tile's Location Tracking Protocol
35th USENIX Security Symposium (USENIX Security 26)
- Fingerprinting SDKs for Mobile Apps and Where to Find Them: Understanding the Market for Device Fingerprinting
Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security (ACM CCS `25)
- Cryptography in the Wild: An Empirical Analysis of Vulnerabilities in Cryptographic Libraries
Proceedings of the 19th ACM Asia Conference on Computer and Communications Security
- Robust, Privacy-Preserving, Transparent, and Auditable On-Device Blocklisting
- A systematization of voter registration security
Journal of Cybersecurity
- The Android Platform Security Model (2023)
- Going from bad to worse: from Internet voting to blockchain voting
Oxford Journal of Cybersecurity
- KeyForge: Mitigating Email Breaches with Forward- Forgeable Signatures
30th USENIX Security Symposium (USENIX Security 21)
- Security Analysis of the Democracy Live Online Voting System
30th USENIX Security Symposium (USENIX Security 21)
- The PACT Protocol Specification
- The Ballot is Busted Before the Blockchain: A Security Analysis of Voatz, the First Internet Voting Application Used in US Federal Elections
29th USENIX Security Symposium (USENIX Security 20)
- Explaining Explanations: An Overview of Interpretability of Machine Learning
2018 IEEE 5th International Conference on data science and advanced analytics (DSAA)
- Keys Under Doormats: Mandating Insecurity by Requiring Government Access to All Data and Communications
Journal of Cybersecurity
- Security Analysis of Wearable Fitness Devices (Fitbit)
Massachusetts Institute of Technology