7 citations · 23 across the 7 of their papers we have counts for
8 papers
Chain of trust: Unraveling references among Common Criteria certified products
Adam Janovsky, Łukasz Chmielewski, Petr Svenda +2
With 5394 security certificates of IT products and systems, the Common Criteria for Information Technology Security Evaluation have bred an ecosystem entangled with various kind of…
sec-certs: Examining the security certification practice for better vulnerability mitigation
Adam Janovsky, Jan Jancar, Petr Svenda +3
Products certified under security certification frameworks such as Common Criteria undergo significant scrutiny during the costly certification process. Yet, critical vulnerabiliti…
Want to Raise Cybersecurity Awareness? Start with Future IT Professionals
Lydia Kraus, Valdemar Švábenský, Martin Horák +3
As cyber threats endanger everyone, from regular users to computing professionals, spreading cybersecurity awareness becomes increasingly critical. Therefore, our university design…
Will You Trust This TLS Certificate? Perceptions of People Working in IT (Extended Version)
Martin Ukrop, Lydia Kraus, Vashek Matyas
Flawed TLS certificates are not uncommon on the Internet. While they signal a potential issue, in most cases they have benign causes (e.g., misconfiguration or even deliberate depl…
A Longitudinal Study of Cryptographic API: a Decade of Android Malware
Adam Janovsky, Davide Maiorca, Dominik Macko +2
Cryptography has been extensively used in Android applications to guarantee secure communications, conceal critical data from reverse engineering, or ensure mobile users' privacy.…
Biased RSA private keys: Origin attribution of GCD-factorable keys
Adam Janovsky, Matus Nemec, Petr Svenda +2
In 2016, Svenda et al. (USENIX 2016, The Million-key Question) reported that the implementation choices in cryptographic libraries allow for qualified guessing about the origin of…
A Large-Scale Comparative Study of Beta Testers and Standard Users
Vlasta Stavova, Lenka Dedkova, Martin Ukrop +1
Beta testers are the first end users outside a software company to use its product. They have been used for decades and are rightly credited not only with finding and reporting bug…
Practical Cryptographic Data Integrity Protection with Full Disk Encryption Extended Version
Milan Broz, Mikulas Patocka, Vashek Matyas
Full Disk Encryption (FDE) has become a widely used security feature. Although FDE can provide confidentiality, it generally does not provide cryptographic data integrity protectio…