About Me

My name is Xiaoyuan (Owen) Wu, currently a fifth-year Societal Computing PhD student at CMU advised by Professor Lujo Bauer. I was previously advised by Professor Adam J. Aviv at GWUSEC.

Publications

• How Representative Are Web Crawlers as a Substitute for Users? Investigating Factors That Impact the Fidelity of Online Tracking Measurements
  Xiaoyuan Wu, Arushi Bandi, Diva-Oriane Marty, Jenny Tang, Lujo Bauer, Darion Cassel, and Eric Zeng.
  In Proceedings on Privacy Enhancing Technologies, 2027 (1). July 2027. To appear.
  
• User Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarios
  Xiaoyuan Wu, Roshni Kaushik, Wenkai Li, Lujo Bauer, and Koichi Onoue.
  In Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (ACL). Oral presentation. January 2026.
  [Video presentation]
• Passing Down Passwords: How Older Adults Approach Postmortem Account Access and Digital Estate Planning
  Jenny Tang, Xiaoyuan Wu, Lujo Bauer, Nicolas Christin, and Lorrie Faith Cranor.
  In Proceedings of the 2026 CHI Conference on Human Factors in Computing Systems (CHI). April 2026.
• 🏆 Estimating LLM Consistency: A User Baseline vs Surrogate Metrics
  Xiaoyuan Wu, Weiran Lin, Omer Akgul, and Lujo Bauer.
  In Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing (EMNLP). November 2025. Senior Area Chair Highlights
  [Video presentation]
• The Impact of Device Type, Data Practices, and Use Case Scenarios on Privacy Concerns about Eye-tracked Augmented Reality in the United States and Germany
  Efe Bozkir, Babette Bühler, Xiaoyuan Wu, Enkelejda Kasneci, Lujo Bauer, and Lorrie Faith Cranor.
  Journal of Cybersecurity, Volume 11, Issue 1. November 2025.
• Measuring Risks to Users’ Health Privacy Posed by Third-Party Web Tracking and Targeted Advertising
  Eric Zeng, Xiaoyuan Wu, Emily Ertmann, Lily Huang, Danielle Johnson, Anusha Mehendale, Brandon Tang, Karolina Zhukoff, Michael Adjei-Poku, Lujo Bauer, Ari Friedman, and Matthew McCoy.
  In Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems (CHI). April 2025.
• Transparency or Information Overload? Evaluating Users’ Comprehension and Perceptions of the iOS App Privacy Report
  Xiaoyuan Wu, Lydia Hu, Eric Zeng, Hana Habib, and Lujo Bauer.
  In Proceedings of the 32nd Network and Distributed System Security Symposium (NDSS). February 2025.
  [Video presentation]

Show earlier publications

• User Perceptions of Five-Word Passwords
  Xiaoyuan Wu, Collins W. Munyendo, Eddie Cosic, Genevieve A. Flynn, Olivia Legault, and Adam J. Aviv.
  Annual Computer Security Applications Conference (ACSAC). December 2022.
• Security and Privacy Perceptions of Third-Party Application Access for Google Accounts
  David G. Balash, Xiaoyuan Wu, Miles Grant, Irwin Reyes, and Adam J. Aviv.
  31st USENIX Security Symposium (USENIX Security). August 2022.
• Longitudinal Analysis of Privacy Labels in the Apple App Store
  David G. Balash, Mir Masood Ali, Xiaoyuan Wu, Chris Kanich, and Adam J. Aviv.
  arXiv 2206.02658. June 2022.

Awards/Recognitions

• CyLab Presidential Fellowship – 2026
• CMU S3D Presidential Fellowship – 2025
• Dean’s List – Fall 2019, Spring 2020, Fall 2020, Spring 2021
• Heroes of Systems at GWU – Fall 2020
  Achievement for CSCI 3411 - Operating Systems

Teaching Experience

• Teaching Assistant
  Machine Learning for Cybersecurity - 17739 – August 2026 - December 2026
  Introduction to Computer Security - 18330 – August 2024 - December 2024
• Undergraduate Teaching Assistant
  Software Engineering - CSCI 2113 – August - December 2021 & January - May 2022
• Learning Assistant
  Discrete Structures I - CSCI 1311 – January - May 2020 & January - May 2021