Text-based CAPTCHA Strengths and Weaknesses
Based on sucessfull attacks on 13 of the most popular captchas schemes
we show how to attack text-based captchas and provide guidelines on how to design secure ones.
@CCS 2011
medias:2
Study research
Sort by:
Articles, softwares and blog posts related to study
captcha
embedded devices
Towards Secure Embedded Web Interfaces
We audited the security of more than 30 embedded devices web interfaces
and found more than 50 vulnerabilities. To help developers, we have developed WebDroid
the first framework specifically dedicated to build secure embedded WebApp.
@Usenix Security 2011
medias:2
captcha
How Good are Humans at Solving CAPTCHAs A Large Scale Evaluation
We perform a mass-scale user study on how people react
to the 21 most popular captcha schemes (13 images, 8 audios). This study reveals that
even the most popular captchas scheme are often difficult for humans,
with audio captchas being particularly problematic.
@S&P 2010
medias:2
study
State of the Art Automated Black-Box Web Application Vulnerability Testing
We evaluate the effectiveness of the most popular web automated
vulnerability scanners and analyze how effective they are at detecting various vulnerabilities
(XSS, CSRF, SQLi…). We also test how good they are at crawling websites
and discovering non-standard links (flash, java, AJAX)
@S&P 2010
medias:2
blog
TrackBack Spam Abuse and Prevention
We conducted a longitudinal study of TrackBack spam,
collecting and analyzing almost 10 million samples from a massive spam campaign
over a 1 period.
We report our finding including where the spam campaign
leads and why blog spammers are different than email spammers.
@CCSW 2009
medias:2
embedded devices
XCS cross channel scripting and its impact on web applications
We reveal a series of attacks against embedded devices based
on a new type of vulnerability that we call cross channel scripting (XCS).
XCS is a sophisticated form of cross site scripting (XSS) in which the attack injection
and execution are carried out via different protocols.
@CCS 2009
medias:2
embedded devices
Embedded Management Interfaces Emerging Massive Insecurity
@BlackHat USA 09 2009
medias:2