Journal: IEEE Security & Privacy