Website on Risk-based Authentication launched
Accompanying the accepted IFIP SEC paper, we launched the website rbainfo.org to inform about Risk-based Authentication (RBA) in general. The website presents the RBA state-of-the-art and discloses how eight popular online services use this technology.
Besides the paper and detailed results, the website also provides a video of the Facebook privacy leak which was discovered in the study.
German technology news website GIGA.de gave press coverage on the Facebook privacy leak, including an interview with Stephan Wiefling.March 26, 2019
Paper accepted at IFIP SEC 2019
The paper Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild by Stephan Wiefling, Luigi Lo Iacono and Markus Dürmuth was accepted for the 34th IFIP TC-11 International Conference on Information Security and Privacy Protection (IFIP SEC 2019). The conference will take place from June 25th to June 27th in Lisbon, Portugal.March 26, 2019
Paper accepted at ACM SAC 2019
The paper “Mind the Cache: Large-Scale Analysis of Web Caching” by Hoai Viet Nguyen, Luigi Lo Iacono and Hannes Federrath has been accepted at the 34rd ACM/SIGAPP Symposium on Applied Computing (SAC). The conference will take place from 8th - 12th April in Limassol, Cyprus.December 6, 2018
Project TrUSD started
The research project Transparente und selbstbestimmte Ausgestaltung der Datennutzung im Unternehmen (TrUSD) has recently started. The project aims to develop so-called Privacy Dashboards for use in companies. These dashboards want to build a bridge between the potential of data analysis and the right of employees to privacy. More information can be found on the website of the TrUSD project.October 10, 2018
Talks at RFH IT Security & Forensic Days 2018
Peter Leo Gorski and Stephan Wiefling will give talks at the RFH IT Security & Forensic Days on November 8th, 2018. The talks will be about Usable Security and Risk-based Authentication, respectively. More information can be found in the official program.October 8, 2018
Paper published at HAISA 2018
The paper “Warn if Secure or How to Deal with Security by Default in Software Development?” by Peter Leo Gorski, Luigi Lo Iacono, Stephan Wiefling and Sebastian Möller has been published at the 12th International Symposium on Human Aspects of Information Security & Assurance (HAISA). The conference will took place from 29th - 31st August in Dundee, Scotland.August 27, 2018
New Cache Testing Tool published
We developed a cache testing tool based on the paper “Systematic Analysis of Web Browser Caches”. This tool allows to analyze the compliance RFC 7240 compliance of web caching systems. More details can be found here.August 22, 2018
Paper published at Soups 2018
The paper “Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse” by Peter Leo Gorski, Luigi Lo Iacono, Dominik Wermke, Christian Stransky, Sebastian Möller, Yasemin Acar, Sascha Fahl has been published at the 14th Symposium on Usable Privacy and Security (SOUPS). The conference took place from 12th - 14th August in Baltimore, MD, USA.
British technology news website The Register gave press coverage of the paper in the article “Here’s a fab idea: Get crypto libs to warn devs when they screw up”.August 14, 2018