23 citations · 31 across the 8 of their papers we have counts for
9 papers
Misbinding Raw Public Keys to Identities in TLS
Mariam Moustafa, Mohit Sethi, Tuomas Aura
The adoption of security protocols such as Transport Layer Security (TLS) has significantly improved the state of traffic encryption and integrity protection on the Internet. Despi…
Security Analysis of the Consumer Remote SIM Provisioning Protocol
Abu Shohel Ahmed, Aleksi Peltonen, Mohit Sethi +1
Remote SIM provisioning (RSP) for consumer devices is the protocol specified by the GSM Association for downloading SIM profiles into a secure element in a mobile device. The proce…
Threat modeling framework for mobile communication systems
Siddharth Prakash Rao, Silke Holtmanns, Tuomas Aura
Due to the complex nature of mobile communication systems, most of the security efforts in its domain are isolated and scattered across underlying technologies. This has resulted i…
Client-side Vulnerabilities in Commercial VPNs
Thanh Bui, Siddharth Prakash Rao, Markku Antikainen +1
Internet users increasingly rely on commercial virtual private network (VPN) services to protect their security and privacy. The VPN services route the client's traffic over an enc…
XSS Vulnerabilities in Cloud-Application Add-Ons
Thanh Bui, Siddharth Rao, Markku Antikainen +1
Cloud-application add-ons are microservices that extend the functionality of the core applications. Many application vendors have opened their APIs for third-party developers and c…
Misbinding Attacks on Secure Device Pairing and Bootstrapping
Mohit Sethi, Aleksi Peltonen, Tuomas Aura
In identity misbinding attacks against authenticated key-exchange protocols, a legitimate but compromised participant manipulates the honest parties so that the victim becomes unkn…