12 citations · 16 across the 4 of their papers we have counts for
4 papers
SSO-Monitor: Fully-Automatic Large-Scale Landscape, Security, and Privacy Analyses of Single Sign-On in the Wild
Maximilian Westers, Tobias Wich, Louis Jannett +3
Single Sign-On (SSO) shifts the crucial authentication process on a website to to the underlying SSO protocols and their correct implementation. To strengthen SSO security, organiz…
Over 100 Bugs in a Row: Security Analysis of the Top-Rated Joomla Extensions
Marcus Niemietz, Mario Korth, Christian Mainka +1
Nearly every second website is using a Content Management System (CMS) such as WordPress, Drupal, and Joomla. These systems help to create and modify digital data, typically within…
On the security of modern Single Sign-On Protocols: Second-Order Vulnerabilities in OpenID Connect
Vladislav Mladenov, Christian Mainka, Jörg Schwenk
OAuth is the new de facto standard for delegating authorization in the web. An important limitation of OAuth is the fact that it was designed for authorization and not for authenti…
Do not trust me: Using malicious IdPs for analyzing and attacking Single Sign-On
Christian Mainka, Vladislav Mladenov, Jörg Schwenk
Single Sign-On (SSO) systems simplify login procedures by using an an Identity Provider (IdP) to issue authentication tokens which can be consumed by Service Providers (SPs). Tradi…