Analysis of Liberty Single-Sign-on with Enabled Clients

Authors:
Birgit Pfitzmann;Michael Waidner
Affiliations:
IBM Zurich Research Lab;IBM Zurich Research Lab
Venue:
IEEE Internet Computing
Year:
2003

Citing 5
Cited 16

Prudent Engineering Practice for Cryptographic Protocols

IEEE Transactions on Software Engineering
Risks of the passport single signon protocol

Proceedings of the 9th international World Wide Web conference on Computer networks : the international journal of computer and telecommunications netowrking
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Privacy in browser-based attribute exchange

Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society
Security Analysis of the SAML Single Sign-on Browser/Artifact Profile

ACSAC '03 Proceedings of the 19th Annual Computer Security Applications Conference

Proving a WS-federation passive requestor profile with a browser model

Proceedings of the 2005 workshop on Secure web services
Proving a WS-Federation passive requestor profile

SWS '04 Proceedings of the 2004 workshop on Secure web service
Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps

Proceedings of the 6th ACM workshop on Formal methods in security engineering
Stronger TLS bindings for SAML assertions and SAML artifacts

Proceedings of the 2008 ACM workshop on Secure web services
A Browser-Based Kerberos Authentication Scheme

ESORICS '08 Proceedings of the 13th European Symposium on Research in Computer Security: Computer Security
A Universally Composable Framework for the Analysis of Browser-Based Security Protocols

ProvSec '08 Proceedings of the 2nd International Conference on Provable Security
Risks of the CardSpace Protocol

ISC '09 Proceedings of the 12th International Conference on Information Security
TruWallet: trustworthy and migratable wallet-based web authentication

Proceedings of the 2009 ACM workshop on Scalable trusted computing
Identity Federation for VoIP systems

Journal of Computer Security - Digital Identity Management (DIM 2007)
The power of recognition: secure single sign-on using TLS channel bindings

Proceedings of the 7th ACM workshop on Digital identity management
Federated identity-management protocols

Proceedings of the 11th international conference on Security Protocols
Towards a formal framework for distributed identity management

APWeb'05 Proceedings of the 7th Asia-Pacific web conference on Web Technologies Research and Development
An XML-Based security architecture for integrating single sign-on and rule-based access control in mobile and ubiquitous web environments

OTM'06 Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part II
Browser model for security analysis of browser-based protocols

ESORICS'05 Proceedings of the 10th European conference on Research in Computer Security
Weakest link attack on single sign-on and its case in SAML v2.0 web SSO

ICCSA'06 Proceedings of the 2006 international conference on Computational Science and Its Applications - Volume Part III
Options for integrating eID and SAML

Proceedings of the 2013 ACM workshop on Digital identity management

Quantified Score

Hi-index	0.00

Visualization

Abstract

Channel-based enabled-client protocols, such as the Liberty-enabled client and proxy profile, offer Web single-sign-on service; however, several security concerns remain.