IEEE Security and Privacy Journal