About

I'm a second-year Computer Science Ph.D. student at the University of Wisconsin-Madison, advised by Prof. Kassem Fawaz. My research interests focus on usable security and privacy. I build systems to address the S&P issues in interpersonal relationship.


Selected Publications

2025

Automatically Detecting Online Deceptive Patterns

Distinguished Paper Award - ACM CCS 2025
Asmit Nayak, Shirley Zhang*, Yash Wani*, Rishabh Khandelwal, Kassem Fawaz
Proceedings of the 2025 on ACM SIGSAC Conference on Computer and Communications Security)
We implement AutoBot, across three downstream applications targeting different web stakeholders: (1) a local browser extension providing users with real-time feedback, (2) a Lighthouse audit to inform developers of potential deceptive patterns on their sites, and (3) as a measurement tool designed for researchers and regulators.
2025

Abusability of Automation Apps in Intimate Partner Violence

Shirley Zhang, Paul Chung, Jacob Vervelde, Nishant Korapati, Rahul Chatterjee, Kassem Fawaz
in Proceedings of the 2025 USENIX Security
This paper systematically explores the potential of automation apps to be used for surveillance and harassment in IPV scenarios.
2025

A Qualitative Exploration of Parents and Their Children's Uses and Gratifications of ChatGPT

Shirley Zhang, Jennica Li, Bengisu Cagiltay, Heather Kirkorian, Bilge, Mutlu, Kassem Fawaz
Family Relations.
This Emerging Ideas report explores families’ (parents and their children) uses and gratification for ChatGPT.
2025

'Impressively Scary': Exploring User Perceptions and Reactions to Unraveling Machine Learning Models in Social Media Applications

Jack West, Bengisu Cagiltay, Shirley Zhang, Jingjie Li, Kassem Fawaz, Suman Banerjee
CHI '25: Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems
We conducted user studies (N=21) and found that participants were unaware to both what the models output and when the models were used in Instagram and TikTok, two major social media platforms. In response to being exposed to the models’ functionality, we observed long term behavior changes in 8 participants. Our analysis uncovers the challenges and opportunities in providing transparency for machine learning models that interact with local user data.
2025

Is Self-Governance Governance?: Evaluating the Consistency of Self-Governance Practices on AI in Social Media Applications

Jack West, Shirley Zhang, Kassem Fawaz, Suman Banerjee
CHI '25 (Sociotechnical AI Governance: Opportunities and Challenges for HCI)
In this work, we compare the currently deployed models for both Instagram and TikTok to their public statements about internal AI governance practices to see if these models live up to their reported standards. We found that Instagram’s model may exhibit undesirable biases in concepts that their other internal models (eg, DINOv2) may lack.
2025

Exploring Differences Between Parents' Perceptions and Mediation of ChatGPT and Social Media. [Poster Presentation]

Jennica Li, Bengisu Cagiltay, Shirley Zhang, Dakota Sullivan, Heather Kirkorian, Bilge, Mutlu, Kassem Fawaz
Digital Media and Developing Minds International Scientific Congress, Washington, D.C

Media Coverage

“UW-Madison researchers find automation apps can enable dating abuse”

WKOW-ABC 27, August 19, 2025. [Read More]

“UW-Madison researchers expose how automation apps can spy—and how to detect it”

College of Engineering, August 5, 2025. [Read More]

Updates / Posts