Profile photo of Coby Wang

Coby Wang



Staff Research Scientist


Visa Research



About Me

I am a research scientist on the AI team at Visa Research, where my research focuses on the security and trustworthiness of agentic AI systems.

My broader research interests include authentication, authorization, and credential security in web, mobile, and distributed systems. My work draws on cryptography, formal verification, cyber deception, and privacy-enhancing technologies to develop and evaluate practical defenses.

Before joining Visa Research in 2022, I received my Ph.D. in Computer Science from the University of North Carolina at Chapel Hill in 2021, where I had the privilege of working with Prof. Michael Reiter. After graduation, I continued working with him as a research associate at Duke University. I spent my first three years on the Systems Security team at Visa Research before moving to the AI team in 2025.

Peer-Reviewed Publications
  1. The 2FA illusion: Uncovering weak links of web account access in the wild

    K. C. Wang, S. S. Arora, and M. K. Reiter


    In Proceedings of the 41st Annual Computer Security Applications Conference (ACSAC '25)

    (Acceptance rate: 84/406=20.69%)

  2. Detecting compromise of passkey storage on the cloud

    M. Islam, S. S. Arora, R. Chatterjee, and K. C. Wang


    In Proceedings of the 34th USENIX Security Symposium (USENIX Security '25)

    (Acceptance rate: 407/2385=17.06%)

  3. A composability analysis framework for Web3 wallet recovery mechanisms

    P. Chatzigiannis, K. C. Wang, S. S. Arora, and M. Minaei


    In Proceedings of the 46th IEEE Symposium on Security and Privacy (IEEE S&P '25)

    (Acceptance rate: 257/1740=14.77%)

  4. Bernoulli honeywords

    K. C. Wang and M. K. Reiter


    In Proceedings of the 31st ISOC Network and Distributed System Security Symposium (NDSS '24)

    (Acceptance rate: 104/694=14.99%)

  5. Using Amnesia to detect credential database breaches

    K. C. Wang and M. K. Reiter


    In Proceedings of the 30th USENIX Security Symposium (USENIX Security '21)

    (Acceptance rate: 246/1316=18.69%)

  6. Detecting stuffing of a user’s credentials at her own accounts

    K. C. Wang and M. K. Reiter


    In Proceedings of the 29th USENIX Security Symposium (USENIX Security '20)

    (Acceptance rate: 157/977=16.07%)

  7. How to end password reuse on the web

    K. C. Wang and M. K. Reiter


    In Proceedings of the 26th ISOC Network and Distributed System Security Symposium (NDSS '19)

    (Acceptance rate: 89/521=17.08%)

  8. PassApp: My app is my password!

    H. Sun, K. Wang, X. Li, N. Qin, and Z. Chen


    In Proceedings of the 17th ACM International Conference on Human-Computer Interaction with Mobile Devices and Services (MobileHCI '15)

    (Acceptance rate: 64/234=27.35%)

Professional Service

Conference PC Member

  • ACM Asia Conference on Computer and Communications Security (AsiaCCS): 2025
  • ACM Conference on Computer and Communications Security (CCS): 2025, 2026
  • Annual Computer Security Applications Conference (ACSAC): 2024, 2025, 2026
  • ISOC Network and Distributed System Security Symposium (NDSS): 2025, 2026, 2027
  • Privacy Enhancing Technologies Symposium (PETS): 2025, 2026
  • USENIX Security Symposium: 2025

Workshop PC Member

  • Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb): 2026
  • Workshop on Large AI Systems and Models with Privacy and Security Analysis (LAMPS): 2025, 2026
  • Workshop on Designing Security for the Web (SecWeb): 2024

Journal Reviewer

  • IEEE Transactions on Dependable and Secure Computing (IEEE TDSC): 2023