SSL/TLS session-aware user authentication - Or how to effectively thwart the man-in-the-middle. - Rolf Oppliger; Ralf Hauser; David A. Basin (Comput. Commun., 2006)

A Proof of Concept Implementation of SSL/TLS Session-Aware User Authentication (TLS-SA). - Rolf Oppliger; Ralf Hauser; David A. Basin; Aldo Rodenhaeuser; Bruno Kaiser (KiVS, 2007)

SSL/TLS session-aware user authentication revisited. - Rolf Oppliger; Ralf Hauser; David A. Basin (Comput. Secur., 2008)

SSL/TLS Session-Aware User Authentication. - Rolf Oppliger; Ralf Hauser; David A. Basin (Computer, 2008)

Protecting TLS-SA implementations for the challenge-response feature of EMV-CAP against challenge collision attacks. - Rolf Oppliger; Ralf Hauser (Secur. Commun. Networks, 2008)