Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case-Reference-Cited by-同舟云学术

Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case

Published:2023-10-16 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses
language:
Short-container-title:

Author:

Baskaran Supraja¹^ORCID,Zhao Lianying²^ORCID,Mannan Mohammad¹^ORCID,Youssef Amr¹^ORCID

Affiliation:

1. Concordia University, Canada

2. Carleton University, Canada

Funder

Natural Sciences and Engineering Research Council of Canada (NSERC)

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3607199.3607236

Reference72 articles.

1. Adchina. 2022. The power of the Baidu super-app. Available at: https://www.adchina.io/what-is-baidu/. Adchina. 2022. The power of the Baidu super-app. Available at: https://www.adchina.io/what-is-baidu/.

2. Alipay. 2022. Mini-app framework demystified. Available at: https://juejin.cn/post/7137478354042617869. Alipay. 2022. Mini-app framework demystified. Available at: https://juejin.cn/post/7137478354042617869.

3. Alipay. 2023. Get access token API. Available at: https://miniprogram.alipay.com/docs/miniprogram/mpdev/v2_applytoken. Alipay. 2023. Get access token API. Available at: https://miniprogram.alipay.com/docs/miniprogram/mpdev/v2_applytoken.

4. Baidu. 2023. Get access Token API. Available at: https://smartprogram.baidu.com/docs/develop/serverapi/serverapilist/. Baidu. 2023. Get access Token API. Available at: https://smartprogram.baidu.com/docs/develop/serverapi/serverapilist/.

5. Baidu. 2023. Get session key API. Available at: https://smartprogram.baidu.com/docs/develop/api/open/getSessionKey/. Baidu. 2023. Get session key API. Available at: https://smartprogram.baidu.com/docs/develop/api/open/getSessionKey/.

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Keep Me Updated: An Empirical Study on Embedded Javascript Engines in Android Apps;Proceedings of the 21st International Conference on Mining Software Repositories;2024-04-15