Paper published at CHI 2020
The paper Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs by Peter Leo Gorski, Yasemin Acar, Luigi Lo Iacono and Sascha Fahl has been published at the 2020 ACM CHI Conference on Human Factors in Computing Systems (CHI). The conference was supposed to take place from April 25th to April 30th in Honolulu, Hawaii, USA.April 24, 2020
Paper accepted at ACM CODASPY 2020
The paper CREHMA: Cache-aware REST-ful HTTP Message Authentication by Hoai Viet Nguyen and Luigi Lo Iacono has been accepted at the The 10th ACM Conference on Data and Application Security and Privacy (CODASPY 2020). The conference will take place from March 16th to March 18th in New Orleans, USA.January 24, 2020
Talks at USP Day 2020
Peter Leo Gorski and Stephan Wiefling are confirmed as speakers at the USP Day 2020. Peter will talk about the influence of information flows in secure software development. Stephan’s talk will cover the Risk-based Authentication practices of big online services.
The USP Day 2020 will take place on the 10th of January, 2020 at the Zuse Institute Berlin. You can register free of charge and read the program in the official announcement.December 10, 2019
Website on CPDoS launched
Accompanying to our accepted ACM CCS paper Your Cache Has Fallen: Cache-Poisoned Denial-of-Service Attack, we launched the website cpdos.org to briefly inform about Cache Poisoned Denial of Service (CPDoS) attacks.
Besides the freely available paper, the website includes videos and upcoming talks on CPDoS attacks.October 22, 2019
Papers accepted at NordSec
Two papers were accepted for the 24th Nordic Conference on Secure IT Systems (NordSec 2019). One paper is Rotten Cellar: Security and Privacy of the Browser Cache Revisited by Florian Dehling, Tobias Mengel, and Luigi Lo Iacono. The other paper is Even Turing Should Sometimes Not Be Able To Tell: Mimicking Humanoid Usage Behavior for Exploratory Studies of Online Services by Stephan Wiefling, Nils Gruschka, and Luigi Lo Iacono.
The conference will take place November 18-20 in Aalborg, Denmark.October 22, 2019
Paper accepted at ACM CCS 2019
The paper Your Cache Has Fallen: Cache-Poisoned Denial-of-Service Attack by Hoai Viet Nguyen, Luigi Lo Iacono and Hannes Federrath has been accepted at the 26th ACM Conference on Computer and Communications Security (CCS 2019). The conference will take place from November 11th to 16th in London, UK.October 8, 2019
Article published in IEEE Communications Standards Magazine
The article Security Challenges of the 3GPP 5G Service Based Architecture by Hans Christian Rudolph, Andreas Kunz, Luigi Lo Iacono, and Hoai Viet Nguyen has been published in the IEEE Communications Standards Magazine.August 12, 2019
Website on Risk-based Authentication launched
Accompanying the accepted IFIP SEC paper, we launched the website rbainfo.org to inform about Risk-based Authentication (RBA) in general. The website presents the RBA state-of-the-art and discloses how eight popular online services use this technology.
Besides the paper and detailed results, the website also provides a video of the Facebook privacy leak which was discovered in the study.
German technology news website GIGA.de gave press coverage on the Facebook privacy leak, including an interview with Stephan Wiefling.March 26, 2019
Paper accepted at IFIP SEC 2019
The paper Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild by Stephan Wiefling, Luigi Lo Iacono and Markus Dürmuth was accepted for the 34th IFIP TC-11 International Conference on Information Security and Privacy Protection (IFIP SEC 2019). The conference will take place from June 25th to June 27th in Lisbon, Portugal.March 26, 2019