Motivated by recent revelations of widespread state surveillance of personal communication,
many solutions now claim to offer secure and private messaging. This includes both a large …

Mobile applications are part of the everyday lives of billions of people, who often trust them
with sensitive information. These users identify the currently focused app solely by its visual …

公钥基础设施(Public Key Infrastructure, PKI) 是典型的密码应用技术. 在PKI 系统中,
由证书认证机构(Certification Authority, CA) 签发数字证书, 绑定PKI 用户的身份信息和公钥 …

QUIC is a secure transport protocol developed by Google and implemented in Chrome in
2013, currently representing one of the most promising solutions to decreasing latency while …

We have conducted the first in-depth empirical study of two important new web security
features: strict transport security (HSTS) and public-key pinning. Both have been added to …

The level of trust accorded to certification authorities has been decreasing over the last few
years as several cases of misbehavior and compromise have been observed. Log-based …

Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols have become the
security backbone of the Web and Internet today. Many systems including mobile and …

In the wake of recent revelations of mass government surveillance, secure messaging
protocols have come under renewed scrutiny. A widespread weakness of existing solutions …

We examine the lifetime of API vulnerabilities on Android and propose an exponential decay
model of the uptake of updates after the release of a fix. We apply our model to a case study …

Encrypted Internet traffic is an essential element to enable security and privacy in the
Internet. Surveys show that websites are more and more being served over HTTPS. They …