{"id":"https://openalex.org/W1774682829","doi":null,"title":"Clickjacking: attacks and defenses","display_name":"Clickjacking: attacks and defenses","publication_year":2012,"publication_date":"2012-08-08","ids":{"openalex":"https://openalex.org/W1774682829","mag":"1774682829"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.306.3710","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.306.3710","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/en-us/um/people/helenw/papers/clickjacking.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048332767","display_name":"Lin-Shung Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lin-Shung Huang","raw_affiliation_strings":["Carnegie Mellon University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111971042","display_name":"Alex Moshchuk","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Moshchuk","raw_affiliation_strings":["Microsoft research#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft research#TAB#","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072397167","display_name":"Helen J. Wang","orcid":"https://orcid.org/0000-0003-1237-9831","observed_orcids":["https://orcid.org/0000-0003-1237-9831"]},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Helen J. Wang","raw_affiliation_strings":["Microsoft research#TAB#"],"raw_orcid":"https://orcid.org/0000-0003-1237-9831","affiliations":[{"raw_affiliation_string":"Microsoft research#TAB#","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088049592","display_name":"Stuart Schechter","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stuart Schechter","raw_affiliation_strings":["Microsoft research#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft research#TAB#","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010105359","display_name":"Collin Jackson","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Collin Jackson","raw_affiliation_strings":["Carnegie Mellon University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":23.4318,"has_fulltext":false,"cited_by_count":113,"citation_normalized_percentile":{"value":0.99417091,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"22","last_page":"22"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.8842999935150146,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.8842999935150146,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.017400000244379044,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/clickjacking","display_name":"clickjacking","score":0.9929999709129333},{"id":"https://openalex.org/keywords/user-intent","display_name":"user intention","score":0.3659999966621399}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.693473756313324},{"id":"https://openalex.org/C2777381055","wikidata":"https://www.wikidata.org/wiki/Q308922","display_name":"Damages","level":2,"score":0.6768201589584351},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6602581739425659},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6172560453414917},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.5563837885856628},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5225043892860413},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4955257177352905},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.4524778127670288},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4326106011867523},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.41162747144699097},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1276634931564331},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.306.3710","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.306.3710","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/en-us/um/people/helenw/papers/clickjacking.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.358.867","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.358.867","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/en-us/people/alexmos/clickjacking-sec12.pdf","raw_type":"text"},{"id":"mag:1774682829","doi":null,"is_oa":false,"landing_page_url":"https://research.microsoft.com/en-us/um/people/helenw/papers/clickjacking.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306421123","display_name":"USENIX Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"USENIX Security Symposium","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1705596515","https://openalex.org/W1974977720","https://openalex.org/W2083940415","https://openalex.org/W2107881300","https://openalex.org/W2114269021","https://openalex.org/W2119494621","https://openalex.org/W2122847456","https://openalex.org/W2143445293","https://openalex.org/W2157250868","https://openalex.org/W2287595538","https://openalex.org/W2288204762","https://openalex.org/W2404236205","https://openalex.org/W2746937343"],"related_works":["https://openalex.org/W1527502244","https://openalex.org/W7100455214","https://openalex.org/W627675301","https://openalex.org/W2083940415","https://openalex.org/W4319790149","https://openalex.org/W2025526090","https://openalex.org/W2265811630","https://openalex.org/W2904052013","https://openalex.org/W2055611117","https://openalex.org/W2476187281"],"abstract_inverted_index":{"Clickjacking":[0],"attacks":[1,30,180,188,209],"are":[2,27,122],"an":[3,62],"emerging":[4],"threat":[5],"on":[6,134,167],"the":[7,55,83,92,153,156,176,207,212],"web.":[8],"In":[9],"this":[10,103],"paper,":[11],"we":[12,106],"design":[13],"new":[14,109],"clickjacking":[15,25,33,59,208,215],"attack":[16],"variants":[17],"using":[18],"existing":[19,24],"techniques":[20],"and":[21,49,90,124,151,181,198],"demonstrate":[22],"that":[23,32,61,121,140,152,186],"defenses":[26],"insufficient.":[28],"Our":[29],"show":[31,185],"can":[34,202],"cause":[35,57],"severe":[36],"damages,":[37],"including":[38],"compromising":[39],"a":[40,66,71,78,108,141],"user\u2019s":[41],"private":[42,47],"webcam,":[43],"email":[44],"or":[45],"other":[46],"data,":[48],"web":[50,114],"surfing":[51],"anonymity.":[52],"We":[53,162,184],"observe":[54],"root":[56,104],"of":[58,70,75,99,131,155,178,214],"is":[60,94,216],"attacker":[63],"application":[64,73],"presents":[65],"sensitive":[67,84,136],"UI":[68,85,119,137],"element":[69],"target":[72],"out":[74,98],"context":[76,129],"to":[77,96,159,174,196],"user":[79,93,132,142,165],"(such":[80],"as":[81],"hiding":[82],"by":[86],"making":[87],"it":[88],"transparent),":[89],"hence":[91],"tricked":[95],"act":[97],"context.":[100],"To":[101],"address":[102],"cause,":[105],"propose":[107],"defense,":[110],"InContext,":[111],"in":[112,210],"which":[113,211],"sites":[115],"(or":[116,126],"applications)":[117],"mark":[118],"elements":[120],"sensitive,":[123],"browsers":[125],"OSes)":[127],"enforce":[128],"integrity":[130],"actions":[133],"these":[135],"elements,":[138],"ensuring":[139],"sees":[143],"everything":[144],"she":[145],"should":[146],"see":[147],"before":[148],"her":[149,160],"action":[150,157],"timing":[154],"corresponds":[158],"intent.":[161],"have":[163,189],"conducted":[164],"studies":[166],"Amazon":[168],"Mechanical":[169],"Turk":[170],"with":[171],"2064":[172],"participants":[173],"evaluate":[175],"effectiveness":[177],"our":[179,182,187,199],"defense.":[183],"success":[190],"rates":[191],"ranging":[192],"from":[193],"43":[194],"%":[195],"98%,":[197],"InContext":[200],"defense":[201],"be":[203],"very":[204],"effective":[205,218],"against":[206],"use":[213],"more":[217],"than":[219],"social":[220],"engineering.":[221],"1":[222]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":13},{"year":2019,"cited_by_count":10},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":11},{"year":2016,"cited_by_count":18},{"year":2015,"cited_by_count":17},{"year":2014,"cited_by_count":19},{"year":2013,"cited_by_count":7},{"year":2012,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2016-06-24T00:00:00"}