60 citations · 186 across the 9 of their papers we have counts for
3 papers · 1 filter
XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany
Paul Höller, Alexander Krumeich, Luigi Lo Iacono
XML Signature Wrapping (XSW) has been a relevant threat to web services for 15 years until today. Using the Personal Health Record (PHR), which is currently under development in Ge…
Evaluation of Account Recovery Strategies with FIDO2-based Passwordless Authentication
Johannes Kunke, Stephan Wiefling, Markus Ullmann +1
Threats to passwords are still very relevant due to attacks like phishing or credential stuffing. One way to solve this problem is to remove passwords completely. User studies on p…
What's in Score for Website Users: A Data-driven Long-term Study on Risk-based Authentication Characteristics
Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono
Risk-based authentication (RBA) aims to strengthen password-based authentication rather than replacing it. RBA does this by monitoring and recording additional features during the…