The current era extensively utilizes the Internet, which uses data. Due to the apparent open-
access Internet service, this data is highly vulnerable to attacks. Data privacy is affected by …

In this paper, we focus on authentication and authorization flaws in web apps that enable
partial or full access to user accounts. Specifically, we develop a novel fully automated black …

As users navigate the web they face a multitude of threats; among them, attacks that result in
account compromise can be particularly devastating. In a world fraught with data breaches …

Single Sign-On (SSO) allows users to effortlessly navigate the Web and obtain a
personalized experience without the hassle of creating and managing accounts across …

Single Sign-On (SSO) is both a core and critical component of user authentication and
authorization on the modern web, as it is often offered by web and mobile applications …

To mitigate a myriad of Web attacks, modern browsers support client-side security policies
shipped through HTTP response headers. To enforce these defenses, the server needs to …

With users becoming increasingly privacy-aware and browser vendors incorporating anti-
tracking mechanisms, browser fingerprinting has garnered significant attention. Accordingly …

Browsers and extensions that aim to block online ads and tracking scripts predominantly rely
on rules from filter lists for determining which resource requests must be blocked. These filter …

Files are a significant attack vector for security boundary violation, yet a systematic
understanding of the vulnerabilities underlying these attacks is lacking. To bridge this gap …

Purpose The purpose of this paper is to examine the extent to which HTTPS encryption and
Google Analytics services have been implemented on academic library websites, and …