Copertina

Broken Object Level Authorization in the Wild: An Empirical Taxonomy from 100+ Bug Bounty Disclosures

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autore principale:	Kaur, Bandana
Natura:	Preprint
Pubblicazione:	2026
Soggetti:	Cryptography and Security K.6.5; C.2.0; D.4.6
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

SecureBank: A Financially-Aware Zero Trust Architecture for High-Assurance Banking Systems
di: Biao, Paulo Fernandes
Pubblicazione: (2025)

CryptoGuard: Lightweight Hybrid Detection and Response to Host-based Cryptojackers in Linux Cloud Environments
di: Park, Gyeonghoon, et al.
Pubblicazione: (2025)

Privacy-Enhancing Encryption in Data Sharing: A Survey on Security, Performance and Functionality
di: Lv, Yongyang, et al.
Pubblicazione: (2026)

A Systematic Review and Taxonomy for Privacy Breach Classification: Trends, Gaps, and Future Directions
di: Fuchs, Clint, et al.
Pubblicazione: (2025)

AITH: A Post-Quantum Continuous Delegation Protocol for Human-AI Trust Establishment
di: Chen, Zhaoliang
Pubblicazione: (2026)

Firmware Distribution as Attack Surface: A Security Study of ASIC Cryptocurrency Miners
di: Pouliquen, Pierre, et al.
Pubblicazione: (2026)

RX-INT: A Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats
di: Juneja, Arjun
Pubblicazione: (2025)

Hiding in the AI Traffic: Abusing MCP for LLM-Powered Agentic Red Teaming
di: Janjusevic, Strahinja, et al.
Pubblicazione: (2025)

The Discovery, Disclosure, and Investigation of CVE-2024-25825
di: Chasens, Hunter
Pubblicazione: (2025)

QERS: Quantum Encryption Resilience Score for Post-Quantum Cryptography in Computer, IoT, and IIoT Systems
di: Rassekhnia, Jonatan
Pubblicazione: (2026)

Quantum Encryption Resilience Score (QERS) for MQTT, HTTP, and HTTPS under Post-Quantum Cryptography in Computer, IoT, and IIoT Systems
di: Rassekhnia, Jonatan
Pubblicazione: (2026)

SpyChain: Multi-Vector Supply Chain Attacks on Small Satellite Systems
di: Vanlyssel, Jack, et al.
Pubblicazione: (2025)

ARMOUR US: Android Runtime Zero-permission Sensor Usage Monitoring from User Space
di: Long, Yan, et al.
Pubblicazione: (2025)

Memory Forensics Techniques for Automated Detection and Analysis of Go Malware
di: Ali, Hala, et al.
Pubblicazione: (2026)

Post-quantum Federated Learning: Secure And Scalable Threat Intelligence For Collaborative Cyber Defense
di: Nayak, Prabhudarshi, et al.
Pubblicazione: (2026)

Silent Consent, Persistent Risk: Android Permission Groups and Custom Permissions
di: Akanji, Olawale Amos, et al.
Pubblicazione: (2026)

Dynamic Vulnerability Patching for Heterogeneous Embedded Systems Using Stack Frame Reconstruction
di: Zhou, Ming, et al.
Pubblicazione: (2025)

vCause: Efficient and Verifiable Causality Analysis for Cloud-based Endpoint Auditing
di: Song, Qiyang, et al.
Pubblicazione: (2026)

A Survey on the Security of Long-Term Memory in LLM Agents: Toward Mnemonic Sovereignty
di: Lin, Zehao, et al.
Pubblicazione: (2026)

The Need for Standardized Evidence Sampling in CMMC Assessments: A Survey-Based Analysis of Assessor Practices
di: Therrien, Logan, et al.
Pubblicazione: (2026)

Bridging the Mobile Trust Gap: A Zero Trust Framework for Consumer-Facing Applications
di: Tabalipa, Alexander
Pubblicazione: (2025)

EXHIB: A Benchmark for Realistic and Diverse Evaluation of Function Similarity in the Wild
di: Fan, Yiming, et al.
Pubblicazione: (2026)

ZTD$_{JAVA}$: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust Dependencies
di: Amusuo, Paschal C., et al.
Pubblicazione: (2023)

Fine-tuning RoBERTa for CVE-to-CWE Classification: A 125M Parameter Model Competitive with LLMs
di: Mosievskiy, Nikita
Pubblicazione: (2026)

Fool Me If You Can: On the Robustness of Binary Code Similarity Detection Models against Semantics-preserving Transformations
di: Uhm, Jiyong, et al.
Pubblicazione: (2026)

UnPII: Unlearning Personally Identifiable Information with Quantifiable Exposure Risk
di: Jeon, Intae, et al.
Pubblicazione: (2026)

RADEP: A Resilient Adaptive Defense Framework Against Model Extraction Attacks
di: Chakraborty, Amit, et al.
Pubblicazione: (2025)

SAFE-SiP: Secure Authentication Framework for System-in-Package Using Multi-party Computation
di: Tashdid, Ishraq, et al.
Pubblicazione: (2025)

Static Attribution of Android Residential Proxy Malware Using Graph Kernels
di: Clark, Peter, et al.
Pubblicazione: (2026)

Dr. Jekyll and Mr. Hyde: Two Faces of LLMs
di: Collu, Matteo Gioele, et al.
Pubblicazione: (2023)

Confronting the Reproducibility Crisis: A Case Study of Challenges in Cybersecurity AI
di: Moulton, Richard H., et al.
Pubblicazione: (2024)

AIRTBench: Measuring Autonomous AI Red Teaming Capabilities in Language Models
di: Dawson, Ads, et al.
Pubblicazione: (2025)

Witnessd: Proof-of-process via Adversarial Collapse
di: Condrey, David
Pubblicazione: (2026)

The Automation Advantage in AI Red Teaming
di: Mulla, Rob, et al.
Pubblicazione: (2025)

Techreport: Evaluating Tor-based Location Privacy for Ethereum Validators
di: Janjua, Muhammad Umar, et al.
Pubblicazione: (2026)

LEMIX: Enabling Testing of Embedded Applications as Linux Applications (Extended Report)
di: Tanksalkar, Sai Ritvik, et al.
Pubblicazione: (2025)

Session Risk Memory (SRM): Temporal Authorization for Deterministic Pre-Execution Safety Gates
di: Chitan, Florin Adrian
Pubblicazione: (2026)

Kettle: Attested builds for verifiable software provenance
di: Asad, Amean, et al.
Pubblicazione: (2026)

Enabling Practical and Privacy-Preserving Image Processing
di: Wang, Chao, et al.
Pubblicazione: (2024)

ML Defender (aRGus NDR): An Open-Source Embedded ML NIDS for Botnet and Anomalous Traffic Detection in Resource-Constrained Organizations
di: Román, Alonso Isidoro
Pubblicazione: (2026)