We describe a new attack against web authentication, which we call dynamic pharming.
Dynamic pharming works by hijacking DNS and sending the victim's browser malicious …

We introduce the notion of a conditioned-safe ceremony. A “ceremony” is similar to the
conventional notion of a protocol, except that a ceremony explicitly includes human …

Researchers are increasingly turning to live, dasiain the wildpsila phishing studies of users,
who unknowingly participate without giving informed consent. Such studies can expose …

In recent research work, two approaches to protect SAML based Federated Identity
Management (FIM) against man-in-the-middle attacks have been proposed. One approach …

In densely populated urban areas WiFi routers form a tightly interconnected proximity
network that can be exploited as a substrate for the spreading of malware able to launch …

This dissertation endeavors to improve the security of user authentication on the World Wide
Web. One threat to Web authentication is phishing, a social engineering attack that solicits …

A User Study Design for Comparing the Security of Registration Protocols Page 1 A User Study
Design for Comparing the Security of Registration Protocols Chris Karlof JD Tygar David …

Internet based donations to political candidates are now a vital part of any successful
campaign. Tens of millions of dollars are raised online each year, primarily in sub …

The standard solution for mutual authentication between human users and servers on the
internet is to execute a transport layer security (TLS) handshake during which the server …

In recent research, two approaches to protect SAML based Federated Identity Management
(FIM) against man-in-the-middle attacks have been proposed. One approach is to bind the …