Imperial College London

Professor Emil Lupu

Faculty of EngineeringDepartment of Computing

Professor of Computer Systems



e.c.lupu Website




564Huxley BuildingSouth Kensington Campus






BibTex format

author = {Karafili, E and Sgandurra, D and Lupu, E},
doi = {10.1007/978-3-030-04372-8_7},
pages = {73--87},
title = {A logic-based reasoner for discovering authentication vulnerabilities between interconnected accounts},
url = {},
year = {2018}

RIS format (EndNote, RefMan)

AB - © Springer Nature Switzerland AG 2018. With users being more reliant on online services for their daily activities, there is an increasing risk for them to be threatened by cyber-attacks harvesting their personal information or banking details. These attacks are often facilitated by the strong interconnectivity that exists between online accounts, in particular due to the presence of shared (e.g., replicated) pieces of user information across different accounts. In addition, a significant proportion of users employs pieces of information, e.g. used to recover access to an account, that are easily obtainable from their social networks accounts, and hence are vulnerable to correlation attacks, where a malicious attacker is either able to perform password reset attacks or take full control of user accounts. This paper proposes the use of verification techniques to analyse the possible vulnerabilities that arises from shared pieces of information among interconnected online accounts. Our primary contributions include a logic-based reasoner that is able to discover vulnerable online accounts, and a corresponding tool that provides modelling of user accounts, their interconnections, and vulnerabilities. Finally, the tool allows users to perform security checks of their online accounts and suggests possible countermeasures to reduce the risk of compromise.
AU - Karafili,E
AU - Sgandurra,D
AU - Lupu,E
DO - 10.1007/978-3-030-04372-8_7
EP - 87
PY - 2018///
SN - 0302-9743
SP - 73
TI - A logic-based reasoner for discovering authentication vulnerabilities between interconnected accounts
UR -
UR -
ER -