Subject: [saag] OAuth Security Workshop

From: Hannes Tschofenig <[email-masked]>
Date: Mon, 25 Jul 2016 13:04:05 +0200

Hi all,

at the SAAG meeting last week I briefly mentioned that we have held an
OAuth Security Workshop on July 14th and 15th 2016 in Trier/Germany.

Here is the link to the webpage:
https://infsec.uni-trier.de/events/osw2016

Slides and position papers are available for download.

This workshop followed a per-invitation only workshop in December 2015
where we discussed attacks against OAuth discovered through the use of
formal methods.

At this workshop we learned more about the use of formal methods, about
the techniques real-world attackers use to break OAuth implementations
and about a new OAuth/OpenID Connect security test suite.

We organized these two workshop primarily to bring security researchers,
and standardization experts closer together.

Ciao
Hannes