Cerberus：OAuth服务提供商实现中查询驱动的可扩展漏洞检测
Cerberus: Query-driven Scalable Vulnerability Detection in OAuth Service Provider Implementations
AI总结：
本研究针对OAuth服务提供商库安全性缺乏自动检测的问题，形式化OAuth规范并设计查询驱动的静态分析工具Cerberus，在热门库中发现47个漏洞（24个新漏洞），获8个开发团队认可及3个CVE编号。
摘要：
OAuth协议已被广泛采用，以简化第三方应用的用户身份验证和服务授权流程。然而，目前很少有研究致力于自动检查服务提供商广泛使用的库的安全性。本文中，我们对OAuth规范和安全最佳实践进行了形式化定义，并设计了自动化静态分析工具Cerberus，用于发现OAuth服务提供商库实现中的逻辑缺陷并识别漏洞。为了在大型服务提供商实现代码库中高效检测安全违规行为，Cerberus采用查询驱动算法来解答与OAuth规范相关的查询。我们通过在下载量达数百万次的热门OAuth库数据集上评估Cerberus，验证了其有效性。在这些知名库中，Cerberus从十类逻辑缺陷中识别出47个漏洞，其中24个为此前未知的漏洞。我们获得了8个库开发团队的认可，并有3个漏洞被纳入CVE（通用漏洞披露）。
英文摘要：
OAuth protocols have been widely adopted to simplify user authentication and service authorization for third-party applications. However, little effort has been devoted to automatically checking the security of the libraries that service providers widely use. In this paper, we formalize the OAuth specifications and security best practices, and design Cerberus, an automated static analyzer, to find logical flaws and identify vulnerabilities in the implementation of OAuth service provider libraries. To efficiently detect security violations in a large codebase of service provider implementation, Cerberus employs a query-driven algorithm for answering queries about OAuth specifications. We demonstrate the effectiveness of Cerberus by evaluating it on datasets of popular OAuth libraries with millions of downloads. Among these high-profile libraries, Cerberus has identified 47 vulnerabilities from ten classes of logical flaws, 24 of which were previously unknown. We got acknowledged by the developers of eight libraries and had three accepted CVEs.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
