12 citations · 15 across the 5 of their papers we have counts for
5 papers
Automatic detection of access control vulnerabilities via API specification processing
Alexander Barabanov, Denis Dergunov, Denis Makrushin +1
Objective. Insecure Direct Object Reference (IDOR) or Broken Object Level Authorization (BOLA) are one of the critical type of access control vulnerabilities for modern application…
Security audit logging in microservice-based systems: survey of architecture patterns
Alexander Barabanov, Denis Makrushin
Objective. Service-oriented architecture increases technical abilities for attacker to move laterally and maintain multiple pivot points inside of compromised environment. Microser…
Authentication and authorization in microservice-based systems: survey of architecture patterns
Alexander Barabanov, Denis Makrushin
Context. Service-oriented architecture and its microservice-based approach increase an attack surface of applications. Exposed microservices become a pivot point for advanced persi…
The Formal Metabasis For Conformity Assessment of Information Security Software and Hardware
Alexander Barabanov, Maxim Grishin, Alexey Markov
An approach to the development of security test procedures for information security controls is presented. The recommendations for optimizing the test procedure are obtained
A Formal Approach To Firewalls Testing Techniques
Alexander Barabanov, Alexey Markov, Valentin Tsirlov
Traditional technologies of firewall testing are overlooked. A new formalized approach is presented. Recommendations on optimization of test procedures are given.