12 citations · 15 across the 3 of their papers we have counts for
3 papers
cs.CR2022★ 12 cited
Automatic detection of access control vulnerabilities via API specification processing
Alexander Barabanov, Denis Dergunov, Denis Makrushin +1
Objective. Insecure Direct Object Reference (IDOR) or Broken Object Level Authorization (BOLA) are one of the critical type of access control vulnerabilities for modern application…
cs.CR2021★ 1 cited
Security audit logging in microservice-based systems: survey of architecture patterns
Alexander Barabanov, Denis Makrushin
Objective. Service-oriented architecture increases technical abilities for attacker to move laterally and maintain multiple pivot points inside of compromised environment. Microser…
cs.CR2020★ 2 cited
Authentication and authorization in microservice-based systems: survey of architecture patterns
Alexander Barabanov, Denis Makrushin
Context. Service-oriented architecture and its microservice-based approach increase an attack surface of applications. Exposed microservices become a pivot point for advanced persi…