31 citations · 123 across the 15 of their papers we have counts for
17 papers
Security Weaknesses in IoT Management Platforms
Bhaskar Tejaswi, Mohammad Mannan, Amr Youssef
A diverse set of Internet of Things (IoT) devices are becoming an integrated part of daily lives, and playing an increasingly vital role in various industry, enterprise and agricul…
Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case
Supraja Baskaran, Lianying Zhao, Mohammad Mannan +1
We conduct a large-scale measurement of developers' insecure practices leading to mini-app to super-app authentication bypass, among which hard-coding developer secrets for such au…
Hidden in Plain Sight: Exploring Encrypted Channels in Android apps
Sajjad Pourali, Nayanamana Samarasinghe, Mohammad Mannan
As privacy features in Android operating system improve, privacy-invasive apps may gradually shift their focus to non-standard and covert channels for leaking private user/device i…
"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software
Jonah Stegman, Patrick J. Trottier, Caroline Hillier +2
Employees are often required to use Enterprise Security Software ("ESS") on corporate and personal devices. ESS products collect users' activity data including users' location, app…
Blindfold: Keeping Private Keys in PKIs and CDNs out of Sight
Hisham Galal, Mohammad Mannan, Amr Youssef
Public key infrastructure (PKI) is a certificate-based technology that helps in authenticating systems identities. HTTPS/TLS relies mainly on PKI to minimize fraud over the Interne…
Not so immutable: Upgradeability of Smart Contracts on Ethereum
Mehdi Salehi, Jeremy Clark, Mohammad Mannan
A smart contract that is deployed to a blockchain system like Ethereum is, under reasonable circumstances, expected to be immutable and tamper-proof. This is both a feature (promot…