Security Analysis of SMS as a Second Factor of Authentication
Despite their popularity and ease of use, SMS-based authentication tokens are arguably one of the least secure forms of two-factor…
Go Static or Go Home: In the end, dynamic systems are simply less secure.
Most current and historic problems in computer and network security boil down to a single observation: letting other people control…
Certificate Transparency: Public, verifiable, append-only logs
On August 28, 2011, a mis-issued wildcard HTTPS certificate for google.com was used to conduct a man-in-the-middle attack against multiple…
Why Is It Taking So Long to Secure Internet Routing?: Routing security incidents can still slip past deployed security defenses.
BGP (Border Gateway Protocol) is the glue that sticks the Internet together, enabling data communications between large networks operated by…
Security Collapse in the HTTPS Market: Assessing legal and technical solutions to secure HTTPS
HTTPS (Hypertext Transfer Protocol Secure) has evolved into the de facto standard for secure Web browsing. Through the certificate-based authentication…
The Web Won’t Be Safe or Secure until We Break It: Unless you’ve taken very particular precautions, assume every Web site you visit knows exactly who you are.
The Internet was designed to deliver information, but few people envisioned the vast amounts of information that would be involved…
Browser Security Case Study: Appearances Can Be Deceiving: A discussion with Jeremiah Grossman, Ben Livshits, Rebecca Bace, and George Neville-Neil
It seems every day we learn of some new security breach. It’s all there for the taking on the Internet:…
Splinternet Behind the Great Firewall of China: Once China opened its door to the world, it could not close it again.
What if you could not access YouTube, Facebook, Twitter, and Wikipedia? How would you feel if Google informed you that…
Securing the Tangled Web: Preventing script injection vulnerabilities through software design
Script injection vulnerabilities are a bane of Web application development: deceptively simple in cause and remedy, they are nevertheless surprisingly…