Corpus ID: 86867153

Signing into One Billion Mobile App Accounts Effortlessly with OAuth 2 . 0

@inproceedings{Yang2016SigningIO,
  title={Signing into One Billion Mobile App Accounts Effortlessly with OAuth 2 . 0},
  author={R. Yang and W. Lau and T. Liu},
  year={2016}
}

• R. Yang, W. Lau, T. Liu
• Published 2016
• Computer Science

OAuth2.0 protocol has been widely adopted by mainstream Identity Providers (IdPs) to support Single-Sign-On service. Since this protocol was originally designed to serve the authorization need for 3rd party websites, different pitfalls have been uncovered when adapting OAuth to support mobile app authentication. To the best of our knowledge, all the attacks discovered so far, including BlackHat USA’16 [3], CCS’14 [2] and ACSAC’15 [5], require to interact with the victim, for example via… Expand

blackhat.com

Save to Library

Create Alert

Cite

Launch Research Feed