AndroTIME: Identifying Timing Side Channels in the Android API

Autor: Bernd Prünster, Gerald Palfinger, Dominik Ziegler

Publikováno v: TrustCom

The permission system of Android has continuously evolved to better guard the privacy of users. New permissions have been introduced and existing methods which were abused now require a permission or have been entirely removed. Retrieving private dat

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::85a753d1e4ae18e3aafb5be9264e7f2d
https://doi.org/10.1109/trustcom50675.2020.00253

AndroPRINT

Autor: Gerald Palfinger, Bernd Prünster

Publikováno v: ARES

In recent Android versions, access to various (unique) identifiers has been restricted or completely removed for third-party applications. However, many information sources can still be combined to create a fingerprint, effectively substituting the n

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::f89a0391c3067d1e209990e83941b88c
https://doi.org/10.1145/3407023.3407055

Multiply, Divide, and Conquer – Making Fully Decentralised Access Control a Reality

Autor: Gerald Palfinger, Bernd Prünster, Dominik Ziegler

Publikováno v: Network and System Security ISBN: 9783030657444
NSS

This paper tackles the issue of access control in fully decentralised systems. Previously, access control always fell back to some degree of centralisation. Our work approaches this problem by outsourcing access policy evaluation to the millions of t

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::e76e56bdc59c20aeea802926a2830f99
https://doi.org/10.1007/978-3-030-65745-1_18

Phish-Hook: Detecting Phishing Certificates Using Certificate Transparency Logs

Autor: Bernd Prünster, Edona Fasllija, Hasan Ferit Eniser

Publikováno v: Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering ISBN: 9783030372309
SecureComm (2)

Certificate misissuance is a growing issue in the context of phishing attacks, as it leads inexperienced users to further trust fraudulent websites, if they are equipped with a technically valid certificate. Certificate Transparency (CT) aims at incr

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::2239d314e75532c67dd632b5c3028ed8
https://doi.org/10.1007/978-3-030-37231-6_18

On the structure and authorization management of RESTful web services

Autor: Bojan Suzic, Bernd Prünster, Dominik Ziegler

Publikováno v: SAC

A broad range of emerging business models relies on the continual exchange of data that flow among different services to generate additional value and derive knowledge in many domains. The magnitude of resource sharing that form the basis of these in

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::7e24c566e8508717f20e4f51b36bf55f
https://doi.org/10.1145/3167132.3167315