@inproceedings {184435, author = {Yuchen Zhou and David Evans}, title = {{SSOScan}: Automated Testing of Web Applications for Single {Sign-On} Vulnerabilities}, booktitle = {23rd USENIX Security Symposium (USENIX Security 14)}, year = {2014}, isbn = {978-1-931971-15-7}, address = {San Diego, CA}, pages = {495--510}, url = {https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/zhou}, publisher = {USENIX Association}, month = aug }