Cryptography Vulnerabilities on HackerOne

DOI
Official URL
Publisher DOI
Abstract
Previous studies have shown that cryptography is hard for developers to use and misusing cryptography leads to severe security vulnerabilities. We studied relevant vulnerability reports on the HackerOne bug bounty platform to understand what types of cryptography vulnerabilities exist in the wild. We extracted eight themes of vulnerabilities from the vulnerability reports and discussed their real-world implications and mitigation strategies. We hope that our findings alert developers, familiarize them with the dire consequences of cryptography misuses, and support them in avoiding such mistakes.
Date Issued
2021-12
Publication Type
Conference Item
Subject(s)
Subjects
scg-pub security snf-asa3 scg21 jb22
Language(s)
en
Author(s)
Additional Credits
ISSN
2693-9177
Title of Event
Access(Rights)
restricted
Show full item