Authenticator Rebinding Attack of the UAF Protocol on Mobile Devices

We present a novel attack named “Authenticator Rebinding Attack,” which aims at the Fast IDentity Online (FIDO) Universal Authentication Framework (UAF) protocol implemented on mobile devices. The presented Authenticator Rebinding Attack rebinds the victim’s identity to the attacker’s authenticator rather than the victim’s authenticator being verified by the service in the UAF protocol, allowing the attacker to bypass the UAF protocol local authentication mechanism by imitating the victim to perform sensitive operations such as transfer and payment. The lack of effective authentication between entities in the implementations of the UAF protocol used in the actual system causes the vulnerability to the Authenticator Rebinding Attack. In this paper, we implement this attack on the Android platform and evaluate its implementability, where results show that the proposed attack is implementable in the actual system and Android applications using the UAF protocol are prone to such attack. We also discuss the possible countermeasures against the threats posed by Authenticator Rebinding Attack for different stakeholders implementing UAF on the Android platform

Pore Size Distribution Characterization by Joint Interpretation of MICP and NMR: A Case Study of Chang 7 Tight Sandstone in the Ordos Basin

Pore size distribution characterization of unconventional tight reservoirs is extremely significant for an optimized extraction of petroleum from such reservoirs. In the present study, mercury injection capillary pressure (MICP) and low-field nuclear magnetic resonance (NMR) are integrated to evaluate the pore size distribution of the Chang 7 tight sandstone reservoir. The results show that the Chang 7 tight sandstones are characterized by high clay mineral content and fine grain size. They feature complex micro-nano-pore network system, mainly composed of regular primary intergranular pores, dissolved pores, inter-crystalline pores, and micro-fractures. Compared to the porosity obtained from MICP, the NMR porosity is closer to the gas-measured porosity (core analysis), and thus can more accurately describe the total pore space of the tight sandstone reservoirs. The pore throat distribution (PTD) from MICP presents a centralized distribution with high amplitude, while the pore size distribution (PSD) derived from NMR shows a unimodal distribution or bimodal distribution with low amplitude. It is notable that the difference between the PSD and the PTD is always related to the pore network composed of large pores connecting with narrow throats. The PSD always coincides very well with the PTD in the very tight non-reservoirs with a much lower porosity and permeability, probably due to the pore geometry that is dominated by the cylindrical pores. However, a significant inconsistency between the PSD and PTD in tight reservoirs of relatively high porosity and low permeability is usually associated with the pore network that is dominated by the sphere-cylindrical pores. Additionally, Euclidean distance between PSD and PTD shows a good positive correlation with pore throat ratio (PTR), further indicating that the greater difference of pore bodies and pore throats, the more obvious differentiation of two distributions. In summary, the MICP and NMR techniques imply the different profiles of pore structure, which has an important implication for deep insight into pore structure and accurate evaluation of petrophysical properties in the tight sandstone reservoir

Characteristics and control factors of tectonic fractures of ultra-deep tight sandstone: Case study of the Lower Cretaceous reservoir in Bozi-Dabei area, Kuqa Depression, Tarim Basin, China

The Bozi-Dabei area in the Kuqa Depression host high-quality reservoirs in the Bashijiqike Formation and Baxigai Formation sandstones of the Lower Cretaceous, in which reservoirs yield significant industrial gas flow despite being situated at a considerable burial depth of 8200 m. The geological history of the target formation involves multiple phases of tectonic movements, resulting in the development of multi-genetic fractures that enhance the reservoir's storage and seepage capacity. Based on the results of the drilling core, field profile survey, imaging logging, and experimental analysis, this study presents an analysis of fractures in the Lower Cretaceous dense sandstone reservoir of the Bozi-Dabei area, andclarifies the characteristics and controlling factors of the multi-genesis and multi-period fractures. Additionally, it proposes an effective fracture development model that accounts for geo-stress control. In the Bozi-Dabei area, the prevailing high extrusion stress environment has led to the development of predominantly regional tectonic fractures and fault-related fractures, with relatively gentle deformation-related fractures. The results of a combination of multi-attribute data determination techniques, including fracture filling, inter-cutting relationship, fracture filling isotope, inclusions, and cathode luminescence tests, this study reveals that the reservoir fractures have experienced three major periods of tectonic movement. The regional tectonic fracture development is mainly controlled by stratigraphic lithology and thickness, while the proximity influences fault co-derived fractures to the fault and the relative positions of the upper and lower plates of the fault. The shift in the direction of the late horizontal maximum principal stress leads to the opening or closing of early fractures under different conditions in the Bozi-Dabei area, consequently affecting the degree of fracture opening and effectiveness. Notably, when the horizontal maximum principal stress is deflected to intersect with early fractures at a smaller angle or even superimpose, the fracture effectiveness of the related group system in the deflection direction improves, resulting in an overall coordination. The distribution characteristics of the fracture system in this highly productive reservoir are the result of dominant configurations from multi-phases of geological activities