In this article, we survey the most common attacks against web sessions, that is, attacks that
target honest web browser users establishing an authenticated session with a trusted web …

Session cookies constitute one of the main attack targets against client authentication on the
Web. To counter these attacks, modern web browsers implement native cookie protection …

Web sessions are fragile and can be attacked at many different levels. Classic attacks like
session hijacking, session fixation and cross-site request forgery are particularly dangerous …

We study the problem of automatically repairing infinite-state software programs wrt
temporal hyperproperties. As a first step, we present a repair approach for the temporal logic …

Micro-policies, originally proposed to implement hardware-level security monitors, constitute
a flexible and general enforcement technique, based on assigning security tags to system …

Binary images have found its place in many applications, such as digital forensics involving
legal documents, authentication of images, digital books, contracts, and text recognition …

Session management is a fundamental component of web applications: despite the
apparent simplicity, correctly implementing web sessions is extremely tricky, as witnessed by …

Building secure web applications is notoriously difficult. The growing importance of
JavaScript as a mainstream programming language for web applications, has led to the …

Web applications are the dominant means to provide access to millions of on-line services
and applications such as banking and e-commerce. To personalize users' web experience …

In the last years most of our daily activities have moved to the digital world, including
sensitive operations related to health data management and financial processes. Security …