Failures of security APIs:a new case

Algwil, Abdalnaser and Yan, Jeff (2016) Failures of security APIs:a new case. In: Financial Cryptography and Data Security. Lecture Notes in Computer Science . Springer, BRB.

Abstract

We report novel API attacks on a Captcha web service, and discuss lessons that we have learned. In so doing, we expand the horizon of security APIs research by extending it to a new setting. We also show that system architecture analysis is useful both for identifying vulnerabilities in security APIs and for fixing them.