Sotabase

Career

· VP of Engineering, Lendable2021–

Publications (14)

The most dangerous code in the world: validating SSL certificates in non-browser software
Conference on Computer and Communications Security · 2012
503
cited
Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks
Network and Distributed System Security Symposium · 2014
97
cited
Rethinking Security of Web-Based System Applications
The Web Conference · 2015
16
cited
SILK-TV: Secret Information Leakage from Keystroke Timing Videos
European Symposium on Research in Computer Security · 2018
13
cited
Common Evaluation Pitfalls in Touch-Based Authentication Systems
ACM Asia Conference on Computer and Communications Security · 2022
11
cited
Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
arXiv.org · 2016
8
cited
PILOT : Password and PIN information leakage from obfuscated typing videos
Journal of computing and security · 2019
8
cited
EARP: Principled Storage, Sharing, and Protection for Mobile Apps
GETMBL · 2016
7
cited
Techniques for Continuous Touch-Based Authentication Modeling
Information Security Practice and Experience · 2022
6
cited
FETA: Fair Evaluation of Touch-based Authentication
2022
2
cited
Fingerprinting and Personal Information Leakage from Touchscreen Interactions
WPES@CCS · 2022
1
cited
A Comparative Study of the Systematic Mapping of Object-Oriented Models to Code Development Frameworks
2011
On the (in)security of service APIs
2015
Sotabase