RBA OpenStack
Unfortunately, there is a lack of available Open Source RBA solutions which provide good security and usability. Our OpenStack plugins aim to close this gap. This also allows websites with small budget to protect their users with RBA.
Developments
HOSIT
A Node.js Framework to imitate human internet browsing behavior on Chrome. We developed this framework for studies on online services which required our browser automation to be as humanlike as possible. In our work, Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild, we used HOSIT to find out more about the Risk-based Authentication practices of big online services (which were kept secret by the companies).
Cache Testing Tool
Caching has been established as a vital mechanism for providing high scalability in modern distributed software systems. Each conventional web browser contains a caching systems which stores and reuses HTTP responses in order to reduce data traffic and communication latency. To prevent web caching systems from returning stale content, the IETF has published the RFC 7234 which specifies caching policies and control directives. Honoring this standard is therefore essential for web caching system in order to provide reliable and fresh content. A violation of the RFC 7234 can lead to the lost of the advantages of caching. Moreover, it can induce also security and privacy issues.
USecureD Tools
Principles, Guidelines and Patterns for Usable Security
jRECMA
This is the jRECMA project, a Java library for signing and verifying REST-ful CoAP Messages. jRECMA is an implementation of the REST-ful Message Authentication (REMA) scheme based on the papers Authentication Scheme for REST and REST-ful CoAP Message Authentication. Download JAR containing the binaries: /REMA/RECMA/jRECMA/jRECMA-v.0.0.1-dev.jar JAR containing the sources: /REMA/RECMA/jRECMA/jRECMA-v.0.0.1-dev-sources.jar
JWx
We are proud to present the JWx 0.0.9: To download the JWx Java library use the following links. The software is provided JAR containing the (Links to https://das.th-koeln.de/jwxdocs/jwx-0.0.9 outdated) Note, that in order to use JWx, some other libraries are required as dependencies. you will find the javadocs on https://das.web.th-koeln.de/jwxdocs/.