5 citations · 15 across the 6 of their papers we have counts for
6 papers
Simple But Not Secure: An Empirical Security Analysis of Two-factor Authentication Systems
Zhi Wang, Xin Yang, Du Chen +4
To protect users from data breaches and phishing attacks, service providers typically implement two-factor authentication (2FA) to add an extra layer of security against suspicious…
Beyond Cookie Monster Amnesia: Real World Persistent Online Tracking
Nasser Mohammed Al-Fannah, Wanpeng Li, Chris J Mitchell
Browser fingerprinting is a relatively new method of uniquely identifying browsers that can be used to track web users. In some ways it is more privacy-threatening than tracking vi…
OAuthGuard: Protecting User Security and Privacy with OAuth 2.0 and OpenID Connect
Wanpeng Li, Chris J Mitchell, Thomas Chen
Millions of users routinely use Google to log in to websites supporting OAuth 2.0 or OpenID Connect; the security of OAuth 2.0 and OpenID Connect is therefore of critical importanc…
Mitigating CSRF attacks on OAuth 2.0 and OpenID Connect
Wanpeng Li, Chris J Mitchell, Thomas Chen
Many millions of users routinely use their Google, Facebook and Microsoft accounts to log in to websites supporting OAuth 2.0 and/or OpenID Connect-based single sign on. The securi…
Not All Browsers Are Created Equal: Comparing Web Browser Fingerprintability
Nasser Mohammed Al-Fannah, Wanpeng Li
Browsers and their users can be tracked even in the absence of a persistent IP address or cookie. Unique and hence identifying pieces of information, making up what is known as a f…
Analysing the Security of Google's implementation of OpenID Connect
Wanpeng Li, Chris J Mitchell
Many millions of users routinely use their Google accounts to log in to relying party (RP) websites supporting the Google OpenID Connect service. OpenID Connect, a newly standardis…