14 citations · 19 across the 5 of their papers we have counts for
5 papers
Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case
Supraja Baskaran, Lianying Zhao, Mohammad Mannan +1
We conduct a large-scale measurement of developers' insecure practices leading to mini-app to super-app authentication bypass, among which hard-coding developer secrets for such au…
vWitness: Certifying Web Page Interactions with Computer Vision
He Shuang, Lianying Zhao, David Lie
Web servers service client requests, some of which might cause the web server to perform security-sensitive operations (e.g. money transfer, voting). An attacker may thus forge or…
SoK: Hardware Security Support for Trustworthy Execution
Lianying Zhao, He Shuang, Shengjie Xu +4
In recent years, there have emerged many new hardware mechanisms for improving the security of our computer systems. Hardware offers many advantages over pure software approaches:…
One-Time Programs made Practical
Lianying Zhao, Joseph I. Choi, Didem Demirag +4
A one-time program (OTP) works as follows: Alice provides Bob with the implementation of some function. Bob can have the function evaluated exclusively on a single input of his cho…
TEE-aided Write Protection Against Privileged Data Tampering
Lianying Zhao, Mohammad Mannan
Unauthorized data alteration has been a longstanding threat since the emergence of malware. System and application software can be reinstalled and hardware can be replaced, but use…