PedramHD

This issue is part of the ongoing formal security analysis of the SSF specification. We already created a formal model of the specification, identified and formalized security properties, and described...

The SSF specification does not require authentication of Receivers at Transmitters. Under certain conditions, this enables an attacker to get a SET for audience values of other Receivers. Please note...

Under certain conditions, an attacker might receive SETs for subjects without being authorized to access information on these subjects. We give the details in the following. Please note that this...