{"id":"https://openalex.org/W4412373453","doi":"https://doi.org/10.56553/popets-2025-0117","title":"Lost in Translation: Exploring the Risks of Web-to-Cross-platform Application Migration","display_name":"Lost in Translation: Exploring the Risks of Web-to-Cross-platform Application Migration","publication_year":2025,"publication_date":"2025-07-13","ids":{"openalex":"https://openalex.org/W4412373453","doi":"https://doi.org/10.56553/popets-2025-0117"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2025-0117","doi":"https://doi.org/10.56553/popets-2025-0117","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0117","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.56553/popets-2025-0117","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Claudio Paloscia","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Claudio Paloscia","raw_affiliation_strings":["University of Illinois Chicago"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Chicago","institution_ids":["https://openalex.org/I39422238"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kostas Solomos","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kostas Solomos","raw_affiliation_strings":["University of Illinois Chicago"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Chicago","institution_ids":["https://openalex.org/I39422238"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083786169","display_name":"Mir Masood Ali","orcid":"https://orcid.org/0009-0006-8462-0945","observed_orcids":["https://orcid.org/0009-0006-8462-0945"]},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mir Masood Ali","raw_affiliation_strings":["University of Illinois Chicago"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Chicago","institution_ids":["https://openalex.org/I39422238"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018209439","display_name":"Jason Polakis","orcid":"https://orcid.org/0000-0001-5034-0730","observed_orcids":["https://orcid.org/0000-0001-5034-0730"]},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason Polakis","raw_affiliation_strings":["University of Illinois Chicago"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Chicago","institution_ids":["https://openalex.org/I39422238"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I39422238"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14969826,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"4","first_page":"24","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.6133000254631042,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.6133000254631042,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.24480000138282776,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.11379999667406082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-platform-development","display_name":"cross-platform development","score":0.8769999742507935},{"id":"https://openalex.org/keywords/electrons","display_name":"electrons","score":0.6690000295639038},{"id":"https://openalex.org/keywords/content-security-policy","display_name":"content security policy","score":0.8769999742507935},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.6399999856948853},{"id":"https://openalex.org/keywords/isolation","display_name":"isolation","score":0.5460000038146973},{"id":"https://openalex.org/keywords/security-testing","display_name":"security testing","score":0.36899998784065247},{"id":"https://openalex.org/keywords/privacy-risks","display_name":"privacy risks","score":0.824999988079071}],"concepts":[{"id":"https://openalex.org/C149364088","wikidata":"https://www.wikidata.org/wiki/Q185917","display_name":"Translation (biology)","level":4,"score":0.5798302888870239},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5114216208457947},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4929380416870117},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.41129860281944275},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.11407315731048584},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C105580179","wikidata":"https://www.wikidata.org/wiki/Q188928","display_name":"Messenger RNA","level":3,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2025-0117","doi":"https://doi.org/10.56553/popets-2025-0117","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0117","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2025-0117","doi":"https://doi.org/10.56553/popets-2025-0117","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0117","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0],"cross-platform":[1,33,150,269],"application-development":[2],"paradigm":[3],"alleviates":[4],"a":[5,46,64,80,123,129,144,268],"major":[6],"challenge":[7],"of":[8,27,63,131,139,163,212,232,254],"native":[9,47],"application":[10,34,40,265],"development,":[11],"namely":[12],"the":[13,17,25,61,68,90,103,154,164,176,204,210,230,243,251,273,281,287,294],"need":[14],"to":[15,29,58,102,114,135,173,175,185,219,225,242,267,279],"re-implement":[16],"codebase":[18],"for":[19],"each":[20],"target":[21],"platform,":[22],"and":[23,42,56,71,93,127,146,179,187,190,194,246,275,283,297],"streamlines":[24],"deployment":[26],"applications":[28],"different":[30,82],"platforms.":[31],"Essentially,":[32],"development":[35],"relies":[36],"on":[37],"migrating":[38,263],"web":[39,140,264],"code":[41,52,141,266,274],"repackaging":[43],"it":[44],"as":[45,115,147,172,229,250],"application.":[48,151],"In":[49,85],"other":[50],"words,":[51],"that":[53,73,74,96,119,183,201,261],"was":[54],"designed":[55,134],"developed":[57],"execute":[59],"within":[60,79,143],"confines":[62],"browser,":[65],"with":[66],"all":[67],"security":[69,92,116,192,214,247,296],"checks":[70],"safeguards":[72,278],"entails,":[75],"is":[76],"now":[77],"deployed":[78],"completely":[81],"execution":[83,109,206,257,289],"environment.":[84],"this":[86,99],"paper,":[87],"we":[88,112,121,160],"explore":[89],"inherent":[91],"privacy":[94,226,298],"risks":[95],"arise":[97],"from":[98,156],"migration,":[100],"due":[101],"fundamental":[104],"differences":[105],"between":[106,203,286],"these":[107],"two":[108,205,288],"environments,":[110,207,290],"which":[111,208],"refer":[113],"lacunae.":[117],"To":[118],"end,":[120],"establish":[122],"differential":[124],"analysis":[125],"workflow":[126],"develop":[128],"set":[130],"customized":[132],"tests":[133],"uncover":[136],"divergent":[137],"behaviors":[138],"executed":[142],"browser":[145],"an":[148],"Electron":[149,177],"Guided":[152],"by":[153],"findings":[155],"our":[157],"empirical":[158],"exploration,":[159],"retrofit":[161],"part":[162],"Web":[165],"Platform":[166],"Tests":[167],"(WPTs)":[168],"testing":[169],"suite":[170],"so":[171],"apply":[174],"framework,":[178],"systematically":[180],"assess":[181],"mechanisms":[182],"relate":[184],"isolation":[186],"access":[188,241],"control,":[189],"critical":[191,213],"policies":[193],"headers.":[195],"Our":[196],"research":[197],"uncovers":[198],"semantic":[199],"gaps":[200],"exist":[202],"affect":[209,293],"enforcement":[211,253],"mechanisms,":[215],"thus":[216],"exposing":[217],"users":[218],"severe":[220],"risks.":[221],"This":[222],"can":[223,291],"lead":[224],"issues":[227,248],"such":[228,249],"exposure":[231],"sensitive":[233],"data":[234],"over":[235],"unencrypted":[236],"connections":[237],"or":[238],"unregulated":[239],"third-party":[240],"local":[244],"filesystem,":[245],"incorrect":[252],"CSP":[255],"script":[256],"directives.":[258],"We":[259],"demonstrate":[260],"directly":[262],"application,":[270],"without":[271],"refactoring":[272],"implementing":[276],"additional":[277],"address":[280],"conceptual":[282],"behavioral":[284],"mismatches":[285],"significantly":[292],"application's":[295],"posture.":[299]},"counts_by_year":[],"updated_date":"2026-09-29T14:09:16.559479","created_date":"2025-10-10T00:00:00"}