Imperial College London
Portrait Picture

Professor Emil Lupu

Faculty of Engineering, Department of Computing

Professor of Computer Systems
 
 
 
//

Contact

 

e.c.lupu Website

 
 
//

Location

 

564Huxley BuildingSouth Kensington Campus

//

Summary

 

Publications

Citation

BibTex format

@inproceedings{Karafili:2018,
author = {Karafili, E and Sgandurra, D and Lupu, E},
pages = {73--87},
publisher = {Springer Verlag},
title = {A logic-based reasoner for discovering authentication vulnerabilities between interconnected accounts},
url = {http://hdl.handle.net/10044/1/63153},
year = {2018}
}
Download

RIS format (EndNote, RefMan)

TY  - CPAPER
AB  - With users being more reliant on online services for their daily activities, there is an increasing risk for them to be threatened by cyber-attacks harvesting their personal information or banking details. These attacks are often facilitated by the strong interconnectivity that exists between online accounts, in particular due to the presence of shared (e.g., replicated) pieces of user information across different accounts. In addition, a significant proportion of users employs pieces of information, e.g. used to recover access to an account, that are easily obtainable from their social networks accounts, and hence are vulnerable to correlation attacks, where a malicious attacker is either able to perform password reset attacks or take full control of user accounts.This paper proposes the use of verification techniques to analyse the possible vulnerabilities that arises from shared pieces of information among interconnected online accounts. Our primary contributions include a logic-based reasoner that is able to discover vulnerable online accounts, and a corresponding tool that provides modelling of user ac- counts, their interconnections, and vulnerabilities. Finally, the tool allows users to perform security checks of their online accounts and suggests possible countermeasures to reduce the risk of compromise.
AU  - Karafili,E
AU  - Sgandurra,D
AU  - Lupu,E
EP  - 87
PB  - Springer Verlag
PY  - 2018///
SN  - 0302-9743
SP  - 73
TI  - A logic-based reasoner for discovering authentication vulnerabilities between interconnected accounts
UR  - http://hdl.handle.net/10044/1/63153
ER  -
Download