A Security Analysis of Emerging Web Standards - HTML5 and Friends, from Specification to Implementation
暂无分享,去创建一个
Wouter Joosen | Frank Piessens | Lieven Desmet | Philippe De Ryck | W. Joosen | Lieven Desmet | P. D. Ryck | Frank Piessens
[1] V. N. Venkatakrishnan,et al. AdJail: Practical Enforcement of Confidentiality and Integrity Policies on Web Advertisements , 2010, USENIX Security Symposium.
[2] Collin Jackson,et al. Securing frame communication in browsers , 2008, CACM.
[3] Dan Boneh,et al. Busting frame busting a study of clickjacking vulnerabilities on popular sites , 2010 .
[4] Dawn Xiaodong Song,et al. Towards a Formal Foundation of Web Security , 2010, 2010 23rd IEEE Computer Security Foundations Symposium.
[5] Deirdre K. Mulligan,et al. Privacy Issues of the W3C Geolocation API , 2010, ArXiv.
[6] Frank Piessens,et al. A security analysis of next generation web standards , 2011 .
[7] Wouter Joosen,et al. Automatic and Precise Client-Side Protection against CSRF Attacks , 2011, ESORICS.
[8] Wouter Joosen,et al. A security analysis of emerging web standards - Extended version , 2012 .
[9] Zhendong Su,et al. The essence of command injection attacks in web applications , 2006, POPL '06.
[10] E. Felten,et al. Cross-Site Request Forgeries : Exploitation and Prevention , 2008 .
[11] Benjamin Livshits,et al. ConScript: Specifying and Enforcing Fine-Grained Security Policies for JavaScript in the Browser , 2010, 2010 IEEE Symposium on Security and Privacy.
[12] Dan Boneh,et al. An Analysis of Private Browsing Modes in Modern Browsers , 2010, USENIX Security Symposium.
[13] David Sands,et al. Safe Wrappers and Sane Policies for Self Protecting JavaScript , 2010, NordSec.
[14] Wouter Joosen,et al. Security of Web Mashups: A Survey , 2010, NordSec.
[15] David Sands,et al. Lightweight self-protecting JavaScript , 2009, ASIACCS '09.
[16] Wouter Joosen,et al. WebJail: least-privilege integration of third-party components in web mashups , 2011, ACSAC '11.