You've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures.

Tommaso Innocenti, Seyed Ali Mirheidari, Amin Kharraz, Bruno Crispo, Engin Kirda

Browse the full DIMVA paper archive.