TL;DR
This paper presents a Trojan-based proof-of-concept attack that compromises WebAuthn sessions in real-world settings and highlights critical vulnerabilities in current WebAuthn deployments, calling attention to the need for stronger endpoint security and architectural safeguards.
Research findings demonstrate that network segmentation, immutable backup technology, multi-factor authentication, and continuous auditing are essential defensive measures.
The widespread adoption of password-based authentication across diverse digital platforms, has significantly heightened exposure to security threats. Due to memorability constraints, users often reuse passwords across multiple platforms, thereby increasing vulnerability to credential-stuffing attacks. Although pass...
This paper presents PreAcher, a system architecture that incorporates third-party Content Delivery Networks (CDNs) into the password authentication process and offloads the authentication workload to CDNs without divulging the passwords to them.
The increasing number of vulnerabilities in operating systems, together with sophisticated kernel-level threats (e.g., rootkits), has weakened the effectiveness of traditional in-kernel protection mechanisms. Since these defenses operate at the same privilege level as the kernel, they share the same attack surface and...
This paper presents the first detailed forensic cryptanalysis of the backdoored UA-8295 message terminal and proposes a methodology based on the Backdoor Conjecture that provides handles to reason about the design of backdoors and the attacks they are designed for.
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
