4 papers
Credential Disclosure in (EU) Digital Identity Wallets: Privacy Risks and Practical Mitigations
Sheila Zingg, Daniele Lain, Yoshimichi Nakatsuka +3
The European Union will introduce the EUDI Wallet by late 2026, which allows users to hold digital credentials (i.e., representations of physical official identity documents) on th…
Can LLMs Make (Personalized) Access Control Decisions?
Friederike Groschupp, Daniele Lain, Aritra Dhar +2
Precise access control decisions are crucial for the security of both traditional applications and emerging agent-based systems. Typically, these decisions are made by users during…
Breaking Bad: How Compilers Break Constant-Time Implementations
Moritz Schneider, Daniele Lain, Ivan Puddu +2
The implementations of most hardened cryptographic libraries use defensive programming techniques for side-channel resistance. These techniques are usually specified as guidelines…
URL Inspection Tasks: Helping Users Detect Phishing Links in Emails
Daniele Lain, Yoshimichi Nakatsuka, Kari Kostiainen +2
The most widespread type of phishing attack involves email messages with links pointing to malicious content. Despite user training and the use of detection techniques, these attac…