How to Grant Less Permissions to Facebook Applications (Contributo in atti di convegno)

Type
Label
  • How to Grant Less Permissions to Facebook Applications (Contributo in atti di convegno) (literal)
Anno
  • 2013-01-01T00:00:00+01:00 (literal)
Alternative label
  • Gianpiero Costantino, Fabio Martinelli, Daniele Sgandurra (2013)
    How to Grant Less Permissions to Facebook Applications
    in IAS 2013, Yassmine Hammamet - Tunisia
    (literal)
Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#autori
  • Gianpiero Costantino, Fabio Martinelli, Daniele Sgandurra (literal)
Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#affiliazioni
  • IIT-CNR (literal)
Titolo
  • How to Grant Less Permissions to Facebook Applications (literal)
Abstract
  • Single Sign-On (SSO) is an authentication procedure that allows users to adopt the same credentials to access multiple services. On the other hand, OAuth 2.0 is a protocol that enables authorized applications to access data that are stored in a resource server. A practical example of the adoption of SSO with OAuth 2.0 is given by all the websites or applications that use the \"Log in with Facebook\" procedure to authenticate users already registered with Facebook. In this paper, we propose a mechanism that exploits a weakness of OAuth 2.0 and a missing control of the website to show how it is possible to register a user by reducing the number of scopes that the website requires with the \"Log in with Facebook\" procedure. Finally, we illustrate two examples that exploit the proposed mechanism and provide a solution to address the problem. (literal)
Prodotto di
Autore CNR
Insieme di parole chiave

Incoming links:


Prodotto
Autore CNR di
Insieme di parole chiave di
data.CNR.it