Mazharul's PhD final defense (CS Building 4310)

Compromising user accounts is one of the most common ways for attackers to undermine otherwise secure online services. According to Verizon’s Data Breach Investigations, 89% of web application hacking attempts involve credential abuse. The consequences can be catastrophic—such as the Colonial Pipeline attack,
which caused $3 million in damages. In this talk I propose reliable detection mechanisms that leverage safely and securely collected characteristics of user-submitted credentials.