DMCA
Password Managers: Attacks and Defenses
Cached
Download Links
| Citations: | 5 - 0 self |
BibTeX
@MISC{Silver_passwordmanagers:,
author = {David Silver and Suman Jana and Eric Chen and Collin Jackson and Dan Boneh},
title = {Password Managers: Attacks and Defenses},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
We study the security of popular password managers and their policies on automatically filling in Web passwords. We examine browser built-in password managers, mobile password managers, and 3rd party managers. We observe significant differences in autofill policies among password managers. Several autofill policies can lead to disastrous consequences where a remote network attacker can extract multiple passwords from the user’s password manager without any interaction with the user. We experiment with these attacks and with techniques to enhance the security of password managers. We show that our enhancements can be adopted by existing managers. 1
