Concepedia

Authorization Flaws

Authorization Flaws is a security vulnerability that belongs to the class of access control defects, specifically characterized by the failure of a mobile application to properly enforce user permissions, thereby allowing unauthorized or elevated access to resources, functionalities, or data that should be restricted based on the user’s intended privilege level.

15

Publications

674

Citations

52

Authors

27

Institutions

Publications per year

2017–2026

6

Parents

Publications

15

Permission based Android security: Issues and countermeasures

Zheran Fang, Weili Han, Yingjiu Li · Computers & Security · 2014 · 169 citations · Full text

, , +12

An automatic search for security flaws in key management schemes

Dennis Longley, Simon Rigby · Computers & Security · 1992 · 92 citations

, , +16

A formal approach for detection of security flaws in the android permission system

Hamid Bagheri, Eunsuk Kang, Sam Malek et al. · Formal Aspects of Computing · 2017 · 64 citations

, , +16

Fix Me Up: Repairing Access-Control Bugs in Web Applications

Sooel Son, Kathryn S. McKinley, Vitaly Shmatikov · 2013 · 60 citations

, , +17

The Cookie Hunter: Automated Black-box Auditing for Web Authentication and Authorization Flaws

Kostas Drakonakis, Sotiris Ioannidis, Jason Polakis · 2020 · 59 citations

, , +17

1–5 of 15

Authors

52

  1. DJ
    Daniel Jackson

    Bournemouth University, United Kingdom

    1 publications · 64 citations

    1

    h-index

  2. SM
    Sam Malek

    George Mason University, United States

    1 publications · 64 citations

    1

    h-index

  3. WH
    Weili Han

    Fudan University, China

    1 publications · 169 citations

    1

    h-index

  4. SK
    Sanghoon Kwak

    KDDI Research (Japan), Japan

    1 publications · 39 citations

    1

    h-index

  5. VS
    Vitaly Shmatikov

    The University of Texas at Austin, United States

    1 publications · 60 citations

    1

    h-index

1–5 of 52

Institutions

27

  1. FORTH Institute of Computer Science

    Heraklion, Greece

    2 h-index

    2 publications

    75 citations

  2. University of California, Irvine

    Irvine, United States

    2 h-index

    2 publications

    95 citations

  3. Chang Gung University

    Taoyuan City, Taiwan

    1 h-index

    1 publications

    18 citations

  4. Shanghai Key Laboratory of Trustworthy Computing

    Shanghai, China

    1 h-index

    4 publications

    60 citations

  5. Christ University

    Bengaluru, India

    1 h-index

    1 publications

    31 citations

  6. National Yang Ming Chiao Tung University

    Hsinchu, Taiwan

    1 h-index

    1 publications

    18 citations

  7. KDDI Research (Japan)

    Fujimino, Japan

    1 h-index

    4 publications

    156 citations

  8. State Key Laboratory of Cryptology

    Beijing, China

    1 h-index

    4 publications

    124 citations

1–8 of 27

Venues

  1. Computers & Security

    2 publications · 261 citations

    2

    h-index

  2. IEEE Transactions on Software Engineering

    TSE · 1 publications · 15 citations

    1

    h-index

  3. Formal Aspects of Computing

    1 publications · 64 citations

    1

    h-index

  4. Applied Network Science

    ANS · 1 publications · 20 citations

    1

    h-index

  5. Computer Communications

    1 publications · 14 citations

    1

    h-index

1–5