{"id":"https://openalex.org/W4247465700","doi":"https://doi.org/10.1145/1190216.1190252","title":"JavaScript instrumentation for browser security","display_name":"JavaScript instrumentation for browser security","publication_year":2007,"publication_date":"2007-01-17","ids":{"openalex":"https://openalex.org/W4247465700","doi":"https://doi.org/10.1145/1190216.1190252"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1145/1190216.1190252","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103359438","display_name":"Dachuan Yu","orcid":null},"institutions":[],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dachuan Yu","raw_affiliation_strings":["DoCoMo Communications Laboratories USA, Inc."],"affiliations":[{"raw_affiliation_string":"DoCoMo Communications Laboratories USA, Inc.","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090054099","display_name":"Ajay Chander","orcid":null},"institutions":[],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ajay Chander","raw_affiliation_strings":["DoCoMo Communications Laboratories USA, Inc."],"affiliations":[{"raw_affiliation_string":"DoCoMo Communications Laboratories USA, Inc.","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109183626","display_name":"Nayeem Islam","orcid":null},"institutions":[],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nayeem Islam","raw_affiliation_strings":["DoCoMo Communications Laboratories USA, Inc."],"affiliations":[{"raw_affiliation_string":"DoCoMo Communications Laboratories USA, Inc.","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027265094","display_name":"Igor Serikov","orcid":null},"institutions":[],"countries":["US"],"is_corresponding":false,"raw_author_name":"Igor Serikov","raw_affiliation_strings":["DoCoMo Communications Laboratories USA, Inc."],"affiliations":[{"raw_affiliation_string":"DoCoMo Communications Laboratories USA, Inc.","institution_ids":[]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":48.906,"has_fulltext":false,"cited_by_count":100,"citation_normalized_percentile":{"value":0.983826,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"237","last_page":"249"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.999,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/unobtrusive-javascript","display_name":"Unobtrusive JavaScript","score":0.647974},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security Policy","score":0.48131835},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation","score":0.45837027}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.84435046},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.84287333},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.6630341},{"id":"https://openalex.org/C198240166","wikidata":"https://www.wikidata.org/wiki/Q2298909","display_name":"Unobtrusive JavaScript","level":4,"score":0.647974},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5736805},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5516577},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.48131835},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.45844364},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.45837027},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.41831166},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40176323},{"id":"https://openalex.org/C103048170","wikidata":"https://www.wikidata.org/wiki/Q725485","display_name":"Rich Internet application","level":3,"score":0.38259122},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3790843},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.33434004}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1145/1190216.1190252","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[],"grants":[],"datasets":[],"versions":[],"referenced_works_count":12,"referenced_works":["https://openalex.org/W2006611045","https://openalex.org/W2006865915","https://openalex.org/W2036910349","https://openalex.org/W2068341689","https://openalex.org/W2079029390","https://openalex.org/W2095881341","https://openalex.org/W2129345992","https://openalex.org/W2137689716","https://openalex.org/W2144696387","https://openalex.org/W2156249516","https://openalex.org/W2160829153","https://openalex.org/W4240166417"],"related_works":["https://openalex.org/W827014118","https://openalex.org/W650647575","https://openalex.org/W597036300","https://openalex.org/W4231812305","https://openalex.org/W36303035","https://openalex.org/W2739095887","https://openalex.org/W2617623045","https://openalex.org/W2505509890","https://openalex.org/W2500345013","https://openalex.org/W2477981260"],"abstract_inverted_index":{"It":[0],"is":[1,56,65,76,83,114],"well":[2],"recognized":[3],"that":[4],"JavaScript":[5,24],"can":[6],"be":[7],"exploited":[8],"to":[9,16,50,60],"launch":[10],"browser-based":[11],"security":[12,62],"attacks.":[13],"We":[14],"propose":[15],"battle":[17],"such":[18],"attacks":[19],"using":[20],"program":[21],"instrumentation.":[22],"Untrusted":[23],"code":[25,125,137],"goes":[26],"through":[27],"a":[28,88,119,142],"rewriting":[29,74],"process":[30,75],"which":[31,81],"identifies":[32],"relevant":[33],"operations,":[34],"modifies":[35],"questionable":[36],"behaviors,":[37],"and":[38,71,105],"prompts":[39],"the":[40,61,69,72,92],"user":[41],"(a":[42],"web":[43],"page":[44],"viewer)":[45],"for":[46],"decisions":[47],"on":[48],"how":[49],"proceed":[51],"when":[52],"appropriate.":[53],"Our":[54],"solution":[55],"parametric":[57],"with":[58],"respect":[59],"policy-the":[63],"policy":[64,82,103],"implemented":[66],"separately":[67],"from":[68],"rewriting,":[70],"same":[73],"carried":[77],"out":[78],"regardless":[79],"of":[80,91,94,111,118,122,144],"in":[84,127],"use.":[85],"Be-sides":[86],"providing":[87],"rigorous":[89],"account":[90],"correctness":[93],"our":[95,112],"solution,":[96],"we":[97],"also":[98],"discuss":[99],"practical":[100],"issues":[101],"including":[102],"management":[104],"prototype":[106],"experiments.":[107],"A":[108],"useful":[109],"by-product":[110],"work":[113],"an":[115],"operational":[116],"semantics":[117],"core":[120],"subset":[121],"JavaScript,":[123],"where":[124],"embedded":[126],"(HTML)":[128],"documents":[129],"may":[130],"generate":[131],"further":[132],"document":[133],"pieces":[134],"(with":[135],"new":[136],"embedded)":[138],"at":[139],"runtime,":[140],"yielding":[141],"form":[143],"self-modifying":[145],"code.":[146]},"abstract_inverted_index_v3":null,"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W4247465700","counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":9},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":11}],"updated_date":"2025-03-16T08:50:17.426778","created_date":"2022-05-12"}