{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T06:09:21Z","timestamp":1725516561580},"publisher-location":"Berlin, Heidelberg","reference-count":32,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540699712"},{"type":"electronic","value":"9783540705000"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-70500-0_2","type":"book-chapter","created":{"date-parts":[[2008,8,12]],"date-time":"2008-08-12T16:07:43Z","timestamp":1218557263000},"page":"6-20","source":"Crossref","is-referenced-by-count":0,"title":["Enforcing User-Aware Browser-Based Mutual Authentication with Strong Locked Same Origin Policy"],"prefix":"10.1007","author":[{"given":"Sebastian","family":"Gajek","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mark","family":"Manulis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"J\u00f6rg","family":"Schwenk","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"2_CR1","unstructured":"Allen, C., Dierks, T.: The TLS Protocol \u2014 Version 1.1. Internet proposed standard RFC 4346 (2006)"},{"key":"2_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"531","DOI":"10.1007\/3-540-44448-3_41","volume-title":"Advances in Cryptology - ASIACRYPT 2000","author":"M. Bellare","year":"2000","unstructured":"Bellare, M., Namprempre, C.: Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm. In: Okamoto, T. (ed.) ASIACRYPT 2000. LNCS, vol.\u00a01976, pp. 531\u2013545. Springer, Heidelberg (2000)"},{"key":"2_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"232","DOI":"10.1007\/3-540-48329-2_21","volume-title":"Advances in Cryptology - CRYPTO \u201993","author":"M. Bellare","year":"1994","unstructured":"Bellare, M., Rogaway, P.: Entity Authentication and Key Distribution. In: Stinson, D.R. (ed.) CRYPTO 1993. LNCS, vol.\u00a0773, pp. 232\u2013249. Springer, Heidelberg (1994)"},{"key":"2_CR4","doi-asserted-by":"publisher","first-page":"62","DOI":"10.1145\/168588.168596","volume-title":"ACM CCS 1993","author":"M. Bellare","year":"1993","unstructured":"Bellare, M., Rogaway, P.: Random Oracles are Practical: A Paradigm for Designing Efficient Protocols. In: ACM CCS 1993, pp. 62\u201373. ACM Press, New York (1993)"},{"key":"2_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"359","DOI":"10.1007\/978-3-540-74835-9_24","volume-title":"Computer Security \u2013 ESORICS 2007","author":"S. Chiasson","year":"2007","unstructured":"Chiasson, S., van Oorschot, P.C., Biddle, R.: Graphical Password Authentication Using Cued Click Points. In: Biskup, J., L\u00f3pez, J. (eds.) ESORICS 2007. LNCS, vol.\u00a04734, pp. 359\u2013374. Springer, Heidelberg (2007)"},{"key":"2_CR6","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1145\/1073001.1073009","volume-title":"SOUPS 2005","author":"R. Dhamija","year":"2005","unstructured":"Dhamija, R., Tygar, J.D.: The Battle against Phishing: Dynamic Security Skins. In: SOUPS 2005, pp. 77\u201388. ACM Press, New York (2005)"},{"key":"2_CR7","doi-asserted-by":"publisher","first-page":"581","DOI":"10.1145\/1124772.1124861","volume-title":"CHI 2006","author":"R. Dhamija","year":"2006","unstructured":"Dhamija, R., Tygar, J.D., Hearst, M.A.: Why Phishing Works? In: CHI 2006, pp. 581\u2013590. ACM Press, New York (2006)"},{"key":"2_CR8","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1145\/1368310.1368317","volume-title":"ACM ASIACCS 2008","author":"P.-A. Fouque","year":"2008","unstructured":"Fouque, P.-A., Pointcheval, D., Zimmer, S.: HMAC is a Randomness Extractor and Applications to TLS. In: ACM ASIACCS 2008, pp. 21\u201332. ACM Press, New York (2008)"},{"key":"2_CR9","unstructured":"Freier, A.O., Kariton, P., Kocher, P.C.: The SSL Protocol: Version 3.0. Internet draft, Netscape Communications (1996)"},{"key":"2_CR10","unstructured":"Gajek, S., Schwenk, S.: Revising the Mature Browser Security Model. Technical Report, HGI TR-2008-004 (2008)"},{"key":"2_CR11","doi-asserted-by":"publisher","first-page":"300","DOI":"10.1145\/1368310.1368354","volume-title":"ACM ASIACCS 2008","author":"S. Gajek","year":"2008","unstructured":"Gajek, S., Manulis, M., Sadeghi, A.-R., Schwenk, J.: Provably Secure Browser-Based User-Aware Mutual Authentication over TLS. In: ACM ASIACCS 2008, pp. 300\u2013311. ACM Press, New York (2008)"},{"key":"2_CR12","first-page":"298","volume-title":"ACSAC 2003","author":"T. Gro\u00df","year":"2003","unstructured":"Gro\u00df, T.: Security Analysis of the SAML Single Sign-on Browser\/Artifact Profile. In: ACSAC 2003, pp. 298\u2013307. IEEE CS, Los Alamitos (2003)"},{"key":"2_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"489","DOI":"10.1007\/11555827_28","volume-title":"Computer Security \u2013 ESORICS 2005","author":"T. Gro\u00df","year":"2005","unstructured":"Gro\u00df, T., Pfitzmann, B., Sadeghi, A.-R.: Browser Model for Security Analysis of Browser-Based Protocols. In: di Vimercati, S.d.C., Syverson, P.F., Gollmann, D. (eds.) ESORICS 2005. LNCS, vol.\u00a03679, pp. 489\u2013508. Springer, Heidelberg (2005)"},{"key":"2_CR14","first-page":"54","volume-title":"SWS 2005","author":"T. Gro\u00df","year":"2005","unstructured":"Gro\u00df, T., Pfitzmann, B., Sadeghi, A.-R.: Proving a WS-Federation Passive Requestor Profile with a Browser Model. In: SWS 2005, pp. 54\u201364. ACM Press, New York (2005)"},{"key":"2_CR15","doi-asserted-by":"publisher","first-page":"421","DOI":"10.1145\/1315245.1315298","volume-title":"CCS 2007","author":"C. Jackson","year":"2007","unstructured":"Jackson, C., Barth, A., Bortz, A., Shao, W., Boneh, D.: Protecting Browsers from DNS Rebinding Attacks. In: CCS 2007, pp. 421\u2013431. ACM Press, New York (2007)"},{"key":"2_CR16","series-title":"Lecture Notes in Computer Science","first-page":"281","volume-title":"FC 2007\/USEC 2007","author":"C. Jackson","year":"2008","unstructured":"Jackson, C., Simon, D.R., Tan, D.S., Barth, A.: An Evaluation of Extended Validation and Picture-in-Picture Phishing Attacks. In: FC 2007\/USEC 2007. LNCS, vol.\u00a04886, pp. 281\u2013293. Springer, Heidelberg (2008)"},{"issue":"1","key":"2_CR17","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1504\/IJACT.2008.017051","volume":"1","author":"M. Jakobsson","year":"2008","unstructured":"Jakobsson, M., Myers, S.: Delayed Password Disclosure. IJACT\u00a01(1), 47\u201359 (2008)","journal-title":"IJACT"},{"key":"2_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"127","DOI":"10.1007\/3-540-45708-9_9","volume-title":"Advances in Cryptology - CRYPTO 2002","author":"J. Jonsson","year":"2002","unstructured":"Jonsson, J., Kaliski, B.S.: On the Security of RSA Encryption in TLS. In: Yung, M. (ed.) CRYPTO 2002. LNCS, vol.\u00a02442, pp. 127\u2013142. Springer, Heidelberg (2002)"},{"key":"2_CR19","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1145\/1315245.1315254","volume-title":"ACM CCS 2007","author":"C. Karlof","year":"2007","unstructured":"Karlof, C., Shankar, U., Tygar, J.D., Wagner, D.: Dynamic Pharming Attacks and Locked Same-Origin Policies for Web Browsers. In: ACM CCS 2007, pp. 58\u201371. ACM Press, New York (2007)"},{"issue":"1\u20136","key":"2_CR20","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1016\/S1389-1286(00)00048-7","volume":"33","author":"D. Kormann","year":"2000","unstructured":"Kormann, D., Rubin, A.: Risks of the Passport Single SignOn Protocol. Computer Networks\u00a033(1\u20136), 51\u201358 (2000)","journal-title":"Computer Networks"},{"key":"2_CR21","unstructured":"Microsoft Corporation. Mitigating Cross-Site Scripting with HTTP-only Cookies (2008), \n                  \n                    http:\/\/msdn2.microsoft.com\/en-us\/library\/ms533046.aspx"},{"key":"2_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"310","DOI":"10.1007\/3-540-44647-8_19","volume-title":"Advances in Cryptology - CRYPTO 2001","author":"H. Krawczyk","year":"2001","unstructured":"Krawczyk, H.: The Order of Encryption and Authentication for Protecting Communications (or: How Secure Is SSL?). In: Kilian, J. (ed.) CRYPTO 2001. LNCS, vol.\u00a02139, pp. 310\u2013331. Springer, Heidelberg (2001)"},{"key":"2_CR23","first-page":"294","volume-title":"FC 2007\/USEC 2007","author":"C. Mason","year":"2008","unstructured":"Mason, C., Baek, K.-H., Smith, S.: WSKE: Web Server Key Enabled Cookies. In: FC 2007\/USEC 2007, pp. 294\u2013306. Springer, Heidelberg (2008)"},{"key":"2_CR24","unstructured":"Mitchell, J.C., Shmatikov, V., Stern, U.: Finite-State Analysis of SSL 3.0. In: USENIX Security Symp., pp. 201\u2013216 (1998)"},{"key":"2_CR25","doi-asserted-by":"publisher","first-page":"332","DOI":"10.1145\/322510.322530","volume":"3","author":"L.C. Paulson","year":"1999","unstructured":"Paulson, L.C.: Inductive Analysis of the Internet protocol TLS. ACM Trans. on Comp. and Syst. Sec.\u00a0(3), 332\u2013351 (1999)","journal-title":"ACM Trans. on Comp. and Syst. Sec."},{"key":"2_CR26","doi-asserted-by":"publisher","first-page":"184","DOI":"10.1109\/SECPRI.2001.924298","volume-title":"IEEE S&P 2001","author":"B. Pfitzmann","year":"2001","unstructured":"Pfitzmann, B., Waidner, M.: A Model for Asynchronous Reactive Systems and its Application to Secure Message Transmission. In: IEEE S&P 2001, pp. 184\u2013200. IEEE Computer Society Press, Los Alamitos (2001)"},{"key":"2_CR27","first-page":"51","volume-title":"IEEE S&P 2007","author":"S.E. Schechter","year":"2007","unstructured":"Schechter, S.E., Dhamija, R., Ozment, A., Fischer, I.: The Emperor\u2019s New Security Indicators. In: IEEE S&P 2007, pp. 51\u201365. IEEE Computer Society Press, Los Alamitos (2007)"},{"key":"2_CR28","unstructured":"Schneier, B., Wagner, D.: Analysis of the SSL 3.0 protocol. In: USENIX Workshop on Electronic Commerce (1996)"},{"issue":"4","key":"2_CR29","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1007\/s00145-002-0133-9","volume":"15","author":"V. Shoup","year":"2002","unstructured":"Shoup, V.: OAEP Reconsidered. Journal of Cryptology\u00a015(4), 223\u2013249 (2002)","journal-title":"Journal of Cryptology"},{"key":"2_CR30","unstructured":"Soghoian, C., Jakobsson, M.: A Deceit-Augmented Ma. In: The Middle Attack Against Bank of America\u2019s SiteKey Service (2007), \n                  \n                    http:\/\/paranoia.dubfire.net\/2007\/04\/deceit-augmented-man-in-middle-attack.html"},{"key":"2_CR31","volume-title":"Ann. Comp. Sec. Applic. Conf","author":"X. Suo","year":"2005","unstructured":"Suo, X., Zhu, Y., Owen, G.S.: Graphical Passwords: A Survey. In: Ann. Comp. Sec. Applic. Conf. IEEE Computer Society Press, Los Alamitos (2005)"},{"key":"2_CR32","unstructured":"W3C. Document Object Model (DOM) (2005), \n                  \n                    http:\/\/www.w3.org\/DOM"}],"container-title":["Lecture Notes in Computer Science","Information Security and Privacy"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-70500-0_2.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,3]],"date-time":"2021-05-03T04:18:43Z","timestamp":1620015523000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-70500-0_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540699712","9783540705000"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-70500-0_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[]}}