Investigating Web Service Account Remediation Advice
summary
Defines a five-phase model (compromise discovery, account recovery, limiting access, service restoration, prevention) and builds a codebook to manually code help pages from 57 U.S.-based web services. Finds only 39% of sites cover all five phases, limiting access appears in under half of sites, service restoration in about 74%, and 90% of sites cover at least three phases. Analysis shows more popular sites and those with disclosed breaches provide more complete remediation advice.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:28What is Account Remediation?
- 1:04Account Remediation Advice
- 1:36Methods
- 2:12Codebook Coding Example
- 3:07Analysis
- 3:45Limiting Access Advice is Sparse
- 4:07Most services do not cover all phases
- 4:30Differences in Advice Coverage
- 5:05Takeaways
related talks
14mThe Challenges Of Remediation During A Cyber Incident
11mAdventures in Recovery Land: Testing the Account Recovery of Popular Websites...
47m15 Years of Web Security: the Rebellious Teenage Years
30mAppSec Timeline: Wins, Failures, Promises, and Predictions
22mTreat the Problems, Not the Symptoms
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
48mOWASP cautions against “insufficient logging & monitoring.” What does sufficient l...
45mSecurity Architecture, An Adventure?