XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers-Reference-Cited by-同舟云学术

XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers

Published:2021-11-12 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Knittel Lukas¹,Mainka Christian¹,Niemietz Marcus²,Noß Dominik Trevor¹,Schwenk Jörg¹

Affiliation:

1. Ruhr University Bochum, Bochum, Germany

2. Niederrhein University of Applied Sciences, Krefeld, Germany

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3460120.3484739

Reference76 articles.

1. Web-based Attacks to Discover and Control Local IoT Devices

2. Devdatta Akhawe Frederik Braun Francois Marier and Joel Weinberger. 2016. Subresource Integrity. W3C Recommendation. W3C. https://www.w3.org/TR/2016/REC-SRI-20160623/. Devdatta Akhawe Frederik Braun Francois Marier and Joel Weinberger. 2016. Subresource Integrity. W3C Recommendation. W3C. https://www.w3.org/TR/2016/REC-SRI-20160623/.

3. A. Barth. 2011. The Web Origin Concept. RFC 6454. IETF. http://tools.ietf.org/rfc/rfc6454.txt A. Barth. 2011. The Web Origin Concept. RFC 6454. IETF. http://tools.ietf.org/rfc/rfc6454.txt

Cited by 9 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Who's Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact;Proceedings of the 19th ACM Asia Conference on Computer and Communications Security;2024-07

2. Tabbed Out: Subverting the Android Custom Tab Security Model;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

3. Finding All Cross-Site Needles in the DOM Stack: A Comprehensive Methodology for the Automatic XS-Leak Detection in Web Browsers;Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security;2023-11-15

4. Scripted Henchmen: Leveraging XS-Leaks for Cross-Site Vulnerability Detection;2023 IEEE Security and Privacy Workshops (SPW);2023-05

5. The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web;2023 IEEE Symposium on Security and Privacy (SP);2023-05