12 citations · 15 across the 3 of their papers we have counts for
3 papers · 1 filter
Automatic detection of access control vulnerabilities via API specification processing
Alexander Barabanov, Denis Dergunov, Denis Makrushin +1
Objective. Insecure Direct Object Reference (IDOR) or Broken Object Level Authorization (BOLA) are one of the critical type of access control vulnerabilities for modern application…
Security audit logging in microservice-based systems: survey of architecture patterns
Alexander Barabanov, Denis Makrushin
Objective. Service-oriented architecture increases technical abilities for attacker to move laterally and maintain multiple pivot points inside of compromised environment. Microser…
Authentication and authorization in microservice-based systems: survey of architecture patterns
Alexander Barabanov, Denis Makrushin
Context. Service-oriented architecture and its microservice-based approach increase an attack surface of applications. Exposed microservices become a pivot point for advanced persi…