Finding flaws from password authentication code in Android apps

• Main Authors: MA, Siqi, BERTINO, Elisa, NEPAL, Surya, LI, Jianru, DIETHELM, Ostry, DENG, Robert H., JHA, Sanjay
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2019
• Subjects: Authentication protocol flaws; Automated program analysis; Mobile application security; Password authentication protocol; Vulnerability detection; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/4511; https://ink.library.smu.edu.sg/context/sis_research/article/5514/viewcontent/esorics19.pdf
• Institution: Singapore Management University

Password authentication is widely used to validate users’ identities because it is convenient to use, easy for users to remember, and simple to implement. The password authentication protocol transmits passwords in plaintext, which makes the authentication vulnerable to eavesdropping and replay atta...