8 citations · 14 across the 11 of their papers we have counts for
12 papers
The Silent Spill: Measuring Sensitive Data Leaks Across Public URL Repositories
Tarek Ramadan, AbdelRahman Abdou, Mohammad Mannan +1
A large number of URLs are made public by various platforms for security analysis, archiving, and paste sharing -- such as VirusTotal, URLScan.io, Hybrid Analysis, the Wayback Mach…
Fine-grained CDN Delegation
Ethan Thompson, Ali Sadeghi Jahromi, AbdelRahman Abdou
The use of Content Delivery Networks (CDNs) has significantly increased over the past decade, with approximately 55 million websites currently relying on CDN services. Emerging sol…
A Survey and Evaluation Framework for Secure DNS Resolution
Ali Sadeghi Jahromi, AbdelRahman Abdou, Paul C. van Oorschot
Since security was not among the original design goals of the Domain Name System (herein called Vanilla DNS), many secure DNS schemes have been proposed to enhance the security and…
ss2DNS: A Secure DNS Scheme in Stage 2
Ali Sadeghi Jahromi, AbdelRahman Abdou, Paul C. van Oorschot
The absence of security and privacy measures between DNS recursive resolvers and authoritative nameservers has been exploited by both on-path and off-path attackers. Although numer…
Work in progress: Identifying Two-Factor Authentication Support in Banking Sites
Srivathsan G. Morkonda, AbdelRahman Abdou
Two-factor authentication (2FA) offers several security benefits that security-conscious users might expect from high-value services such as online banks. In this work, we present…
Certificate Root Stores: An Area of Unity or Disparity?
Jegan Purushothaman, Ethan Thompson, AbdelRahman Abdou
Organizations like Apple, Microsoft, Mozilla and Google maintain certificate root stores, which are used as trust anchors by their software platforms. Is there sufficient consensus…
UWB-ED: Distance Enlargement Attack Detection in Ultra-Wideband
Mridula Singh, Patrick Leu, AbdelRahman Abdou +1
Mobile autonomous systems, robots, and cyber-physical systems rely on accurate positioning information. To conduct distance-measurement, two devices exchange signals and, knowing t…
Secure Client and Server Geolocation Over the Internet
AbdelRahman Abdou, Paul C. van Oorschot
In this article, we provide a summary of recent efforts towards achieving Internet geolocation securely, \ie without allowing the entity being geolocated to cheat about its own geo…
Internet Location Verification: Challenges and Solutions
AbdelRahman Abdou
This thesis addresses the problem of verifying the geographic locations of Internet clients. First, we demonstrate how current state-of-the-art delay-based geolocation techniques a…
Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes
Furkan Alaca, AbdelRahman Abdou, Paul C. van Oorschot
Many password alternatives for web authentication proposed over the years, despite having different designs and objectives, all predominantly rely on the knowledge of some secret.…
A Framework and Comparative Analysis of Control Plane Security of SDN and Conventional Networks
AbdelRahman Abdou, Paul C. van Oorschot, Tao Wan
Software defined networking implements the network control plane in an external entity, rather than in each individual device as in conventional networks. This architectural differ…
Server Location Verification and Server Location Pinning: Augmenting TLS Authentication
AbdelRahman Abdou, P. C. van Oorschot
We introduce the first known mechanism providing realtime server location verification. Its uses include enhancing server authentication (e.g., augmenting TLS) by enabling browsers…