Description:
Explore a comprehensive analysis of OpenID Connect security vulnerabilities and their solutions in this conference talk from AppSecEU 2016. Delve into the differences between OAuth and OpenID Connect, understanding the three-party system and dynamic solutions involved. Examine various attack vectors, including single-phase attacks, replay attacks, and IDP confusion attacks, along with their corresponding countermeasures. Learn about malicious endpoint attacks and out-of-service scenarios through practical demonstrations. Gain insights from security experts as they discuss current states of OpenID Connect implementation and provide a summary of key findings to enhance your understanding of this authentication protocol's security landscape.
Systematically Breaking and Fixing OpenID Connect
Add to list
#Information Security (InfoSec)
#Network Security
#Authentication Protocols
#Cybersecurity
#Programming
#Web Development
#OAuth
#Web Security
#Computer Science
#Information Technology
#Single-Sign-On
#Identity Management
#Security Vulnerabilities