Failures of security APIs : a new case

Algwil, Abdalnaser and Yan, Jeff (2016) Failures of security APIs : a new case. In: Financial Cryptography and Data Security : 2016 Proceedings. Lecture Notes in Computer Science . Springer, BRB.

Abstract

We report novel API attacks on a Captcha web service, and discuss lessons that we have learned. In so doing, we expand the horizon of security APIs research by extending it to a new setting. We also show that system architecture analysis is useful both for identifying vulnerabilities in security APIs and for fixing them.