On the public citation graph
Discovering Concrete Attacks on Website Authorization by Formal Analysis
0 signed · 119 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1006/inco.1998.2740openalex-snapshot
A Calculus for Cryptographic Protocols: The Spi Calculus
inferredcites →https://doi.org/10.1007/11513988_27openalex-snapshot
The AVISPA Tool for the Automated Validation of Internet Security Protocols and Applications
inferredcites →https://doi.org/10.1007/11542322_20openalex-snapshot
Federated Identity-Management Protocols
inferredcites →https://doi.org/10.1007/11555827_28openalex-snapshot
Browser Model for Security Analysis of Browser-Based Protocols
inferredcites →https://doi.org/10.1007/3-540-44880-2_1openalex-snapshot
Alloy: A Logical Modelling Language
inferredcites →https://doi.org/10.1007/978-3-642-36563-8_4openalex-snapshot
Towards Unified Authorization for Android
inferredcites →https://doi.org/10.1007/978-3-642-36830-1_7openalex-snapshot
Keys to the Cloud: Formal Analysis and Concrete Attacks on Encrypted Web Storage
inferredcites →https://doi.org/10.1016/j.cose.2012.08.007openalex-snapshot
An authentication flaw in browser-based Single Sign-On protocols: Impact and remediations
inferredcites →https://doi.org/10.1109/csf.2007.7openalex-snapshot
A Type Discipline for Authorization in Distributed Systems
inferredcites →https://doi.org/10.1109/csf.2010.27openalex-snapshot
Towards a Formal Foundation of Web Security
inferredcites →https://doi.org/10.1109/csfw.2001.930138openalex-snapshot
An efficient cryptographic protocol verifier based on prolog rules
inferredcites →https://doi.org/10.1109/csfw.2006.32openalex-snapshot
Verified Interoperable Implementations of Security Protocols
inferredcites →https://doi.org/10.1109/csnt.2011.141openalex-snapshot
Formal Verification of OAuth 2.0 Using Alloy Framework
inferredcites →https://doi.org/10.1109/mic.2003.1250582openalex-snapshot
Analysis of liberty single-sign-on with enabled clients
inferredcites →https://doi.org/10.1109/msp.2010.203openalex-snapshot
On Adversary Models and Compositional Security
inferredcites →https://doi.org/10.1109/risp.1993.287633openalex-snapshot
A semantic model for authentication protocols
inferredcites →https://doi.org/10.1109/secpri.2002.1004365openalex-snapshot
Binder, a logic-based security language
inferredcites →https://doi.org/10.1109/sfcs.2001.959888openalex-snapshot
Universally composable security: a new paradigm for cryptographic protocols
inferredcites →https://doi.org/10.1109/sp.2012.30openalex-snapshot
Signing Me onto Your Accounts through Facebook and Google: A Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
inferredcites →https://doi.org/10.1109/tit.1983.1056650openalex-snapshot
On the security of public key protocols
inferredcites →https://doi.org/10.1145/1045405.1045409openalex-snapshot
Using static analysis to validate the SAML single sign-on protocol
inferredcites →https://doi.org/10.1145/1275497.1275500openalex-snapshot
A type discipline for authorization policies
inferredcites →https://doi.org/10.1145/1368310.1368330openalex-snapshot
Verified implementations of the information card federated identity-management protocol
inferredcites →https://doi.org/10.1145/1455770.1455782openalex-snapshot
Robust defenses for cross-site request forgery
inferredcites →https://doi.org/10.1145/1456396.1456397openalex-snapshot
Formal analysis of SAML 2.0 web browser single sign-on
inferredcites →https://doi.org/10.1145/2133375.2133378openalex-snapshot
Verified Cryptographic Implementations for TLS
inferredcites →https://doi.org/10.1145/2382196.2382238openalex-snapshot
The devil is in the (implementation) details
inferredcites →https://doi.org/10.1145/266420.266432openalex-snapshot
A calculus for cryptographic protocols
inferredcites →https://doi.org/10.1145/360204.360213openalex-snapshot
Mobile values, new names, and secure communication
inferredcites →https://doi.org/10.1587/transinf.e92.d.836openalex-snapshot
Information-Flow-Based Access Control for Web Browsers
inferredcites →https://doi.org/10.17487/rfc6749openalex-snapshot
The OAuth 2.0 Authorization Framework
inferredcites →https://doi.org/10.17487/rfc6797openalex-snapshot
HTTP Strict Transport Security (HSTS)
inferredcites →https://doi.org/10.17487/rfc6819openalex-snapshot
OAuth 2.0 Threat Model and Security Considerations
inferredcites →https://doi.org/10.3233/jcs-2007-15603openalex-snapshot
Timed analysis of security protocols
inferredcites →https://doi.org/10.3233/jcs-2009-0339openalex-snapshot
Automatic verification of correspondences for security protocols
inferredcites →https://doi.org/10.48550/arxiv.cs/0605109openalex-snapshot
Knowledge Flow Analysis for Security Protocols
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1007/978-3-030-02450-5_31openalex-snapshot
Analyzing Security and Privacy in Design and Implementation of Web Authentication Protocols
inferred← citeshttps://doi.org/10.1007/978-3-030-25540-4_12openalex-snapshot
Automated Synthesis of Secure Platform Mappings
inferred← citeshttps://doi.org/10.1007/978-3-030-58951-6_2openalex-snapshot
Bulwark: Holistic and Verified Security Monitoring of Web Protocols
inferred← citeshttps://doi.org/10.1007/978-3-031-06788-4_42openalex-snapshot
Formal Verification of Security Protocols: ProVerif and Extensions
inferred← citeshttps://doi.org/10.1007/978-3-031-51479-1_12openalex-snapshot
The Grant Negotiation and Authorization Protocol: Attacking, Fixing, and Verifying an Emerging Standard
inferred← citeshttps://doi.org/10.1007/978-3-319-04897-0_11openalex-snapshot
Automatic and Robust Client-Side Protection for Cookie-Based Sessions
inferred← citeshttps://doi.org/10.1007/978-3-319-10082-1_3openalex-snapshot
Automatic Verification of Security Protocols in the Symbolic Model: The Verifier ProVerif
inferred← citeshttps://doi.org/10.1007/978-3-319-10082-1_4openalex-snapshot
Defensive JavaScript - Building and Verifying Secure Web Components.
inferred← citeshttps://doi.org/10.1007/978-3-319-11379-1_10openalex-snapshot
A Lightweight Formal Approach for Analyzing Security of Web Protocols
inferred← citeshttps://doi.org/10.1007/978-3-319-12226-7_6openalex-snapshot
Attacks on the Browser’s Requests
inferred← citeshttps://doi.org/10.1007/978-3-319-20550-2_13openalex-snapshot
More Guidelines Than Rules: CSRF Vulnerabilities from Noncompliant OAuth 2.0 Implementations
inferred← citeshttps://doi.org/10.1007/978-3-319-24174-6_3openalex-snapshot
Analyzing the BrowserID SSO System with Primary Identity Providers Using an Expressive Model of the Web
inferred← citeshttps://doi.org/10.1007/978-3-319-38898-4_13openalex-snapshot
An Approach for Mitigating Potential Threats in Practical SSO Systems
inferred← citeshttps://doi.org/10.1007/978-3-319-61204-1_16openalex-snapshot
Breaking and Fixing Mobile App Authentication with OAuth2.0-based Protocols
inferred← citeshttps://doi.org/10.1007/978-3-319-67531-2_21openalex-snapshot
SVAuth – A Single-Sign-On Integration Solution with Runtime Verification
inferred← citeshttps://doi.org/10.1007/978-3-319-78813-5_41openalex-snapshot
A Framework for Formal Analysis of Privacy on SSO Protocols
inferred← citeshttps://doi.org/10.1007/978-3-319-89722-6openalex-snapshot
Principles of Security and Trust
inferred← citeshttps://doi.org/10.1007/978-3-319-89722-6_8openalex-snapshot
Design, Formal Specification and Analysis of Multi-Factor Authentication Solutions with a Single Sign-On Experience
inferred← citeshttps://doi.org/10.1007/978-3-319-95162-1_32openalex-snapshot
An Implementation of the OAuth 2.0 for an Enterprise Service Bus
inferred← citeshttps://doi.org/10.1007/978-3-642-36830-1_7openalex-snapshot
Keys to the Cloud: Formal Analysis and Concrete Attacks on Encrypted Web Storage
inferred← citeshttps://doi.org/10.1007/978-3-642-38004-4_7openalex-snapshot
Analysis of Communicating Authorization Policies
inferred← citeshttps://doi.org/10.1007/978-3-642-39799-8_50openalex-snapshot
Lengths May Break Privacy – Or How to Check for Equivalences with Length
inferred← citeshttps://doi.org/10.1007/978-3-642-54568-9_15openalex-snapshot
Reference Monitors for Security and Interoperability in OAuth 2.0
inferred← citeshttps://doi.org/10.1007/978-981-10-8890-2_11openalex-snapshot
Achieving Communication Effectiveness of Web Authentication Protocol with Key Update
inferred← citeshttps://doi.org/10.1007/s10009-015-0385-yopenalex-snapshot
SATMC: a SAT-based model checker for security protocols, business processes, and security APIs
inferred← citeshttps://doi.org/10.1007/s11277-019-06499-4openalex-snapshot
A Novel Protocol for Security of Location Based Services in Multi-agent Systems
inferred← citeshttps://doi.org/10.1016/j.cose.2017.04.011openalex-snapshot
Anatomy of the Facebook solution for mobile single sign-on: Security assessment and improvements
inferred← citeshttps://doi.org/10.1016/j.cose.2018.01.014openalex-snapshot
A privacy-enhanced OAuth 2.0 based protocol for Smart City mobile applications
inferred← citeshttps://doi.org/10.1016/j.jlamp.2016.08.006openalex-snapshot
Formal methods for web security
inferred← citeshttps://doi.org/10.1108/ics-12-2013-0089openalex-snapshot
Security evaluation of the OAuth 2.0 framework
inferred← citeshttps://doi.org/10.1109/access.2019.2920675openalex-snapshot
Towards Further Formal Foundation of Web Security: Expression of Temporal Logic in Alloy and Its Application to a Security Model With Cache
inferred← citeshttps://doi.org/10.1109/access.2021.3093327openalex-snapshot
Survey on Delegated and Self-Contained Authorization Techniques in CPS and IoT
inferred← citeshttps://doi.org/10.1109/cloudcom.2013.75openalex-snapshot
Adapting Workflows Using Generic Schemas: Application to the Security of Business Processes
inferred← citeshttps://doi.org/10.1109/csf.2014.33openalex-snapshot
Provably Sound Browser-Based Enforcement of Web Session Integrity
inferred← citeshttps://doi.org/10.1109/csf.2018.00032openalex-snapshot
A Little More Conversation, a Little Less Action, a Lot More Satisfaction: Global States in ProVerif
inferred← citeshttps://doi.org/10.1109/csf49147.2020.00016openalex-snapshot
Language-Based Web Session Integrity
inferred← citeshttps://doi.org/10.1109/csf61375.2024.00002openalex-snapshot
Formal Security Analysis of the OpenID FAPI 2.0: Accompanying a Standardization Process
inferred← citeshttps://doi.org/10.1109/eurosp.2017.32openalex-snapshot
SoK: Single Sign-On Security — An Evaluation of OpenID Connect
inferred← citeshttps://doi.org/10.1109/eurosp.2017.45openalex-snapshot
Large-Scale Analysis & Detection of Authentication Cross-Site Request Forgeries
inferred← citeshttps://doi.org/10.1109/hase.2015.20openalex-snapshot
Verification for OAuth Using ASLan++
inferred← citeshttps://doi.org/10.1109/iceccs.2015.20openalex-snapshot
Formal Analysis of a Single Sign-On Protocol Implementation for Android
inferred← citeshttps://doi.org/10.1109/iceccs.2015.39openalex-snapshot
Analyzing Security Property of Android Application Implementation Using Formal Method
inferred← citeshttps://doi.org/10.1109/icrtit.2014.6996166openalex-snapshot
Detecting cloning attack in Social Networks using classification and clustering techniques
inferred← citeshttps://doi.org/10.1109/icst.2015.7102630openalex-snapshot
Security Threat Identification and Testing
inferred← citeshttps://doi.org/10.1109/pacrim.2013.6625487openalex-snapshot
A security analysis of the OAuth protocol
inferred← citeshttps://doi.org/10.1109/rtsi.2016.7740623openalex-snapshot
A delegated authorization solution for smart-city mobile applications
inferred← citeshttps://doi.org/10.1109/secdev.2016.017openalex-snapshot
Design Space Exploration for Security
inferred← citeshttps://doi.org/10.1109/sp.2014.49openalex-snapshot
An Expressive Model for the Web Infrastructure: Definition and Application to the Browser ID SSO System
inferred← citeshttps://doi.org/10.1109/sp63933.2026.00116openalex-snapshot
Audience Injection Attacks: A New Class of Attacks on Web-Based Authorization and Authentication Standards
inferred← citeshttps://doi.org/10.1109/wetice.2014.71openalex-snapshot
Enforcing Expressive Accountability Policies
inferred← citeshttps://doi.org/10.1145/2736277.2741089openalex-snapshot
Network-based Origin Confusion Attacks against HTTPS Virtual Hosting
inferred← citeshttps://doi.org/10.1145/3321705.3329801openalex-snapshot
MoSSOT: An Automated Blackbox Tester for Single Sign-On Vulnerabilities in Mobile Applications
inferred← citeshttps://doi.org/10.1145/3386685openalex-snapshot
Formal Analysis of Mobile Multi-Factor Authentication with Single Sign-On Login
inferred← citeshttps://doi.org/10.1145/3641399.3641446openalex-snapshot
Symbolic Verification of Mesh Commissioning Protocol of Thread
inferred← citeshttps://doi.org/10.1145/3699716openalex-snapshot
Formal Security Analysis of the OpenID FAPI 2.0 Family of Protocols: Accompanying a Standardization Process
inferred← citeshttps://doi.org/10.14722/ndss.2014.23212openalex-snapshot
Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud
inferred← citeshttps://doi.org/10.14722/ndss.2016.23286openalex-snapshot
Attack Patterns for Black-Box Security Testing of Multi-Party Web Applications
inferred← citeshttps://doi.org/10.14722/ndss.2020.24278openalex-snapshot
Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks
inferred← citeshttps://doi.org/10.1561/3300000004openalex-snapshot
Modeling and Verifying Security Protocols with the Applied Pi Calculus and ProVerif
inferred← citeshttps://doi.org/10.15673/0453-8307.2/2015.35890openalex-snapshot
АВТОРИЗАЦІЯ АВТОМОБІЛЬНОГО КОМПЬЮТЕРА, ЯКИЙ НЕ МАЄ ПІДТРИМКИ БРАУЗЕРА, З МОБІЛЬНИХ ПРИСТРОЇВ ЗА ДОПОМОГОЮ ТЕХНОЛОГІЇ BLUETOOTH
inferred← citeshttps://doi.org/10.22271/tpi.2017.v6.i10a.1341openalex-snapshot
Development and quality assessment of cookies prepared by using “Wheat flour & Sattu”
inferred← citeshttps://doi.org/10.28945/1980openalex-snapshot
To Social Login or not Login? Exploring Factors Affecting the Decision
inferred← citeshttps://doi.org/10.3233/jcs-140503openalex-snapshot
Discovering concrete attacks on website authorization by formal analysis1
inferred← citeshttps://doi.org/10.3233/jcs-150529openalex-snapshot
CookiExt: Patching the browser against session hijacking attacks
inferred← citeshttps://doi.org/10.3929/ethz-a-007605235openalex-snapshot
Analysis of reachability properties in communicating authorization policies
inferred← citeshttps://doi.org/10.48550/arxiv.1508.01719openalex-snapshot
SPRESSO: A Secure, Privacy-Respecting Single Sign-On System for the Web
inferred← citeshttps://doi.org/10.48550/arxiv.1601.01229openalex-snapshot
A Comprehensive Formal Security Analysis of OAuth 2.0
inferred← citeshttps://doi.org/10.48550/arxiv.1609.03003openalex-snapshot
The Applied Pi Calculus: Mobile Values, New Names, and Secure Communication
inferred← citeshttps://doi.org/10.48550/arxiv.1908.02204openalex-snapshot
Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks
inferred← citeshttps://doi.org/10.5220/0005969001470158openalex-snapshot
Security of Mobile Single Sign-On: A Rational Reconstruction of Facebook Login Solution
inferred← citeshttps://doi.org/10.70675/02e964afz3bb1z45dbz99a4z982ee83ecc25openalex-snapshot
On the security of authentication protocols on the web
inferred← citeshttps://doi.org/10.70675/f4cf2f0bz0586z49e8za6efzdc9b55bca787openalex-snapshot
Loose coupling and substitution principle in objet-oriented frameworks for web services
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.