Abstract: Methods, systems, and devices for user authentication are described. A first device may generate a keypair at a secure module. The keypair includes a public key and a private key that is stored at the secure module. The first device may authenticate the first device and a user of the first device with an identity management platform and may generate a header at an authentication client based on the authenticating. The header may be generated in accordance with an application-layer protocol for demonstrating proof-of-possession (DPoD). The first device may collect device signals and sign the header with the private key and the device signals based on a web client invoking the authentication client via a loopback interface and the authentication client accessing the secure module. The first device may transmit the signed header to a server of the identity management platform via the web client.

Abstract: In one embodiment, control-flow information comprising an indication of function execution order for an application may be generated using source code for the application. Function information for the application may be identified, the function information comprising an indication of an execution context for a function of the application. A model graph to test the application may be generated based on the control-flow information and the function information.