Paper presented at IFIP SEC 2021

Two papers were recently published and presented at the IFIP SEC 2021 conference.

The paper XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany by Paul Höller, Alexander Krumeich, and Luigi Lo Iacono found security weaknesses that can be exploited in the German personal health record.

The paper Less is Often More: Header Whitelisting as Semantic Gap Mitigation in HTTP-Based Software Systems by Andre Büttner, Hoai Viet Nguyen, Nils Gruschka, and Luigi Lo Iacono introduce the header whitelisting (HWL) approach to address the semantic gap in HTTP message processing pipelines.