Finding flaws from password authentication code in Android apps

• المؤلفون الرئيسيون: MA, Siqi, BERTINO, Elisa, NEPAL, Surya, LI, Jianru, DIETHELM, Ostry, DENG, Robert H., JHA, Sanjay
• التنسيق: text
• اللغة: English
• منشور في: Institutional Knowledge at Singapore Management University 2019
• الموضوعات: Authentication protocol flaws; Automated program analysis; Mobile application security; Password authentication protocol; Vulnerability detection; Information Security
• الوصول للمادة أونلاين: https://ink.library.smu.edu.sg/sis_research/4511; https://ink.library.smu.edu.sg/context/sis_research/article/5514/viewcontent/esorics19.pdf

Password authentication is widely used to validate users’ identities because it is convenient to use, easy for users to remember, and simple to implement. The password authentication protocol transmits passwords in plaintext, which makes the authentication vulnerable to eavesdropping and replay atta...