As the Internet has transformed into a critical infrastructure, society has become more
vulnerable to its security flaws. Despite substantial efforts to address many of these …

Security and privacy of users have become significant concerns due to the involvement of
the Internet of Things (IoT) devices in numerous applications. Cyber threats are growing at …

In this paper, we focus on authentication and authorization flaws in web apps that enable
partial or full access to user accounts. Specifically, we develop a novel fully automated black …

In the modern Web, service providers often rely heavily on third parties to run their services.
For example, they make use of ad networks to finance their services, externally hosted …

There is a rich body of literature on measuring and optimizing nearly every aspect of the
web, including characterizing the structure and content of web pages, devising new …

In recent years, we have seen an increased interest in studying the software supply chain of
user-facing applications to uncover problematic third-party dependencies. Prior work shows …

Many websites rely on third parties for services (eg, DNS, CDN, etc.). However, it also
exposes them to shared risks from attacks (eg, Mirai DDoS attack [24]) or cascading failures …

Online tracking is complex and users find itchallenging to protect themselves from it. While
the aca-demic community has extensively studied systems andusers for tracking practices …

The rapid spread of COVID-19 has made manual contact tracing difficult. Thus, various
public health authorities have experimented with automatic contact tracing using mobile …

Objective We conduct a first large-scale analysis of mobile health (mHealth) apps available
on Google Play with the goal of providing a comprehensive view of mHealth apps' security …