Security Reading Group

Multiple Password Interference in Text Passwords and Click-Based Graphical Passwords

2009-10-13T12:22:00.001-07:00

Sonia Chiasson et al, Carleton University. Presented by Adrian Mettler.

Ripley: Automatically Securing Web 2.0 Applications Through Replicated Execution

2009-10-06T13:13:00.000-07:00

K.Vikram, Abhishek Prateek, and Ben Livshits. Presented by Joel Weinberger. The paper presents a system, Ripley, which allows for the automatic replicated execution of a client-side program. In modern web applications and AJAX frameworks, more and more computation is pushed to the client in order to reduce the amount of communication between the client and server. However, as computation is pushed to the client, malicious users can abuse this to violate the integrity of data on the server. Ripley automatically extracts client computation so it can be replicated on the server and verified.

Static Enforcement of Web Application Integrity Through Strong Typing

2009-09-29T12:24:00.000-07:00

Wil Robertson and Giovanni Vigna of UCSB. Presented by Matthew Finifter.

S.773, the cybersecurity bill in the Senate

2009-09-22T13:14:00.000-07:00

Presented by Ari Rabkin.

Crying Wolf: An Empirical Study of SSL Warning Effectiveness

2009-09-08T12:25:00.000-07:00

Joshua Sunshine, Serge Egelman, Hazim Almuhimedi, Neha Atri, and Lorrie Faith Cranor, Carnegie Mellon University. Presented by Erika Chin.