23 citations · 39 across the 10 of their papers we have counts for
7 papers · 1 filter
Online Authentication Habits of Indian Users
Pratyush Choudhary, Subhrajit Das, Mukul Paras Potta +2
Passwords have been long used as the primary authentication method for web services. Weak passwords used by the users have prompted the use of password management tools and two-fac…
Least Privilege Access for Persistent Storage Mechanisms in Web Browsers
Gayatri Priyadarsini Kancherla, Dishank Goel, Abhishek Bichhawat
Web applications often include third-party content and scripts to personalize a user's online experience. These scripts have unrestricted access to a user's private data stored in…
Measuring Compliance of Consent Revocation on the Web
Gayatri Priyadarsini Kancherla, Nataliia Bielova, Cristiana Santos +1
The GDPR requires websites to facilitate the right to revoke consent from Web users. While numerous studies measured compliance of consent with the various consent requirements, no…
Contextual and Granular Policy Enforcement in Database-backed Applications
Abhishek Bichhawat, Matt Fredrikson, Jean Yang +1
Database-backed applications rely on inlined policy checks to process users' private and confidential data in a policy-compliant manner as traditional database access control mecha…
WebPol: Fine-grained Information Flow Policies for Web Browsers
Abhishek Bichhawat, Vineet Rajani, Jinank Jain +2
In the standard web browser programming model, third-party scripts included in an application execute with the same privilege as the application's own code. This leaves the applica…
Generalizing Permissive-Upgrade in Dynamic Information Flow Analysis
Abhishek Bichhawat, Vineet Rajani, Deepak Garg +1
Preventing implicit information flows by dynamic program analysis requires coarse approximations that result in false positives, because a dynamic monitor sees only the executed tr…
Information Flow Control in WebKit's JavaScript Bytecode
Abhishek Bichhawat, Vineet Rajani, Deepak Garg +1
Websites today routinely combine JavaScript from multiple sources, both trusted and untrusted. Hence, JavaScript security is of paramount importance. A specific interesting problem…