Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations

Wanpeng Li; Chris J Mitchell; Tom Chen

doi:10.1007/978-3-030-03251-7_3

Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations

Wanpeng Li, Chris J Mitchell, Tom Chen

Department of Information Security

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

275 Downloads (Pure)

Original language	English
Title of host publication	Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers
Editors	Vashek Matyáš , Petr Švenda , Frank Stajano , Bruce Christianson , Jonathan Anderson
Publisher	Springer
Pages	24-41
Number of pages	18
ISBN (Electronic)	978-3-030-03251-7
ISBN (Print)	978-3-030-03250-0
DOIs	https://doi.org/10.1007/978-3-030-03251-7_3
Publication status	Published - 22 Dec 2018

Publication series

Name	Lecture Notes in Computer Science
Volume	11286

Access to Document

10.1007/978-3-030-03251-7_3

Accepted ManuscriptAccepted author manuscript, 456 KB

Cite this

Li, W., Mitchell, C. J., & Chen, T. (2018). Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations. In V. Matyáš , P. Švenda , F. Stajano , B. Christianson , & J. Anderson (Eds.), Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers (pp. 24-41). (Lecture Notes in Computer Science; Vol. 11286). Springer. https://doi.org/10.1007/978-3-030-03251-7_3

Li, Wanpeng ; Mitchell, Chris J ; Chen, Tom. / Your Code Is My Code : Exploiting a Common Weakness in OAuth 2.0 Implementations. Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers. editor / Vashek Matyáš ; Petr Švenda ; Frank Stajano ; Bruce Christianson ; Jonathan Anderson . Springer, 2018. pp. 24-41 (Lecture Notes in Computer Science).

@inproceedings{63ad9eab3b6a476ead32469f3bf9a6cd,

title = "Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations",

author = "Wanpeng Li and Mitchell, {Chris J} and Tom Chen",

year = "2018",

month = dec,

day = "22",

doi = "10.1007/978-3-030-03251-7_3",

language = "English",

isbn = "978-3-030-03250-0",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "24--41",

editor = "{Maty{\'a}{\v s} }, {Vashek } and {{\v S}venda }, {Petr } and {Stajano }, Frank and {Christianson }, {Bruce } and {Anderson }, Jonathan",

booktitle = "Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers",

}

Li, W, Mitchell, CJ & Chen, T 2018, Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations. in V Matyáš , P Švenda , F Stajano , B Christianson & J Anderson (eds), Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers. Lecture Notes in Computer Science, vol. 11286, Springer, pp. 24-41. https://doi.org/10.1007/978-3-030-03251-7_3

Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations. / Li, Wanpeng; Mitchell, Chris J; Chen, Tom.
Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers. ed. / Vashek Matyáš ; Petr Švenda ; Frank Stajano ; Bruce Christianson ; Jonathan Anderson . Springer, 2018. p. 24-41 (Lecture Notes in Computer Science; Vol. 11286).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Your Code Is My Code

T2 - Exploiting a Common Weakness in OAuth 2.0 Implementations

AU - Li, Wanpeng

AU - Mitchell, Chris J

AU - Chen, Tom

PY - 2018/12/22

Y1 - 2018/12/22

UR - http://www.chrismitchell.net/Papers/ycimce.pdf

U2 - 10.1007/978-3-030-03251-7_3

DO - 10.1007/978-3-030-03251-7_3

M3 - Conference contribution

SN - 978-3-030-03250-0

T3 - Lecture Notes in Computer Science

SP - 24

EP - 41

BT - Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers

A2 - Matyáš , Vashek

A2 - Švenda , Petr

A2 - Stajano , Frank

A2 - Christianson , Bruce

A2 - Anderson , Jonathan

PB - Springer

ER -

Li W, Mitchell CJ, Chen T. Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations. In Matyáš V, Švenda P, Stajano F, Christianson B, Anderson J, editors, Security Protocols XXVI: 26th International Workshop, Cambridge, UK, March 19–21, 2018, Revised Selected Papers. Springer. 2018. p. 24-41. (Lecture Notes in Computer Science). Epub 2018 Nov 24. doi: 10.1007/978-3-030-03251-7_3

Your Code Is My Code: Exploiting a Common Weakness in OAuth 2.0 Implementations

Publication series

Access to Document

Other files and links

Cite this