activity
20162023
most citedCryptanalysis of a Chaotic Image Encryption Algorithm Based on Information Entropy

250 citations · 408 across the 12 of their papers we have counts for

collaborators

12 papers

cs.CR2023★ 1 cited

Spoofing Against Spoofing: Towards Caller ID Verification In Heterogeneous Telecommunication Systems

Shen Wang, Mahshid Delavar, Muhammad Ajmal Azad +3

Caller ID spoofing is a global industry problem and often acts as a critical enabler for telephone fraud. To address this problem, the Federal Communications Commission (FCC) has m…

cs.CR2021★ 16 cited

Anti-Counterfeiting for Polymer Banknotes Based on Polymer Substrate Fingerprinting

Shen Wang, Ehsan Toreini, Feng Hao

Polymer banknotes are the trend for printed currency and have been adopted by more than fifty countries worldwide. However, over the past years, the quantity of polymer counterfeit…

cs.CR2021★ 12 cited

Formal Modelling and Security Analysis of Bitcoin's Payment Protocol

Paolo Modesti, Siamak F. Shahandashti, Patrick McCorry +1

The Payment Protocol standard BIP70, specifying how payments in Bitcoin are performed by merchants and customers, is supported by the largest payment processors and most widely-use…

cs.CR2019

DOMtegrity: Ensuring Web Page Integrity against Malicious Browser Extensions

Ehsan Toreini, Maryam Mehrnezhad, Siamak F. Shahandashti +1

In this paper, we address an unsolved problem in the real world: how to ensure the integrity of the web content in a browser in the presence of malicious browser extensions? The pr…

cs.CR2019★ 2 cited

On legitimate mining of cryptocurrency in the browser - a feasibility study

Saulius Venskutonis, Feng Hao, Matthew Collison

Cryptocurrency mining in the browser has the potential to provide a new pay-as-you-go monetisation mechanism for consuming digital media over the Web. However, browser mining has r…

cs.CR2018★ 16 cited

Analysing and Patching SPEKE in ISO/IEC

Feng Hao, Roberto Metere, Siamak F. Shahandashti +1

Simple Password Exponential Key Exchange (SPEKE) is a well-known Password Authenticated Key Exchange (PAKE) protocol that has been used in Blackberry phones for secure messaging an…

cs.CR2018★ 250 cited

Cryptanalysis of a Chaotic Image Encryption Algorithm Based on Information Entropy

Chengqing Li, Dongdong Lin, Bingbing Feng +2

Recently, a chaotic image encryption algorithm based on information entropy (IEAIE) was proposed. This paper scrutinizes the security properties of the algorithm and evaluates the…

cs.CR2017★ 1 cited

Cryptanalyzing an image encryption algorithm based on autoblocking and electrocardiography

Chengqing Li, Dongdong Lin, Jinhu Lü +1

This paper analyzes the security of an image encryption algorithm proposed by Ye and Huang [\textit{IEEE MultiMedia}, vol. 23, pp. 64-71, 2016]. The Ye-Huang algorithm uses electro…

cs.CR2017★ 2 cited

Botnet in the Browser: Understanding Threats Caused by Malicious Browser Extensions

Raffaello Perrotta, Feng Hao

Browser extensions have been established as a common feature present in modern browsers. However, some extension systems risk exposing APIs which are too permissive and cohesive wi…

cs.CR2017★ 3 cited

Texture to the Rescue: Practical Paper Fingerprinting based on Texture Patterns

Ehsan Toreini, Siamak F. Shahandashti, Feng Hao

In this paper, we propose a novel paper fingerprinting technique based on analyzing the translucent patterns revealed when a light source shines through the paper. These patterns r…

cs.CR2016★ 58 cited

Stealing PINs via Mobile Sensors: Actual Risk versus User Perception

Maryam Mehrnezhad, Ehsan Toreini, Siamak F. Shahandashti +1

In this paper, we present the actual risks of stealing user PINs by using mobile sensors versus the perceived risks by users. First, we propose PINlogger.js which is a JavaScript-b…

cs.CR2016★ 47 cited

TouchSignatures: Identification of User Touch Actions and PINs Based on Mobile Sensor Data via JavaScript

Maryam Mehrnezhad, Ehsan Toreini, Siamak F. Shahandashti +1

Conforming to W3C specifications, mobile web browsers allow JavaScript code in a web page to access motion and orientation sensor data without the user's permission. The associated…