Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: OAuthShield: Efficient Security Checking for OAuth Service Provider
  Implementations   OAuth protocols have been widely adopted to simplify user authentication and
service authorization for third-party applications. However, little effort has
been devoted to automatically checking the security of libraries that are
widely used by service providers. In this paper, we formalize the OAuth
specifications and security best practices, and design OAuthShield, an
automated static analyzer, to find logical flaws and identify vulnerabilities
in the implementation of OAuth authorization server libraries. To efficiently
detect OAuth violations in a large codebase, OAuthShield employs a
demand-driven algorithm for answering queries about OAuth specifications. To
demonstrate the effectiveness of OAuthShield, we evaluate it on ten popular
OAuth libraries that have millions of downloads. Among these high-profile
libraries, OAuthShield has identified 47 vulnerabilities from ten classes of
logical flaws, 24 of which were previously unknown. We got acknowledged by the
developers of six libraries and had three accepted CVEs.

14
The categories of this paper are: math-ph
19
The categories of this paper are: eess
26
The categories of this paper are: bayes-an
21
The categories of this paper are: adap-org
0
The categories of this paper are: hep-ph
11
The categories of this paper are: hep-lat
5
The categories of this paper are: gr-qc
29
The categories of this paper are: funct-an
30
The categories of this paper are: q-alg
34
The categories of this paper are: chem-ph
3
The categories of this paper are: physics
24
The categories of this paper are: dg-ga
37
The categories of this paper are: supr-con
7
The categories of this paper are: hep-th
15
The categories of this paper are: nucl-ex
32
The categories of this paper are: atom-ph