{"id":"https://openalex.org/W3176933418","doi":"https://doi.org/10.1007/978-3-030-78120-0_22","title":"Less is Often More: Header Whitelisting as Semantic Gap Mitigation in HTTP-Based Software Systems","display_name":"Less is Often More: Header Whitelisting as Semantic Gap Mitigation in HTTP-Based Software Systems","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3176933418","doi":"https://doi.org/10.1007/978-3-030-78120-0_22","mag":"3176933418"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-030-78120-0_22","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-030-78120-0_22","pdf_url":null,"source":{"id":"https://openalex.org/S4210185096","display_name":"IFIP advances in information and communication technology","issn_l":"1868-422X","issn":["1868-422X","1868-4238"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://nbn-resolving.org/urn:nbn:de:hbz:1044-opus-55491","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026098420","display_name":"Andre B\u00fcttner","orcid":"https://orcid.org/0000-0002-0138-366X"},"institutions":[{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Andre B\u00fcttner","raw_affiliation_strings":["University of Oslo, Gaustadall\u00e9en 23B, 0373, Oslo, Norway","UiO - University of Oslo (P.O 1072 Blindern 0316 Oslo - Norway)"],"raw_orcid":"https://orcid.org/0000-0002-0138-366X","affiliations":[{"raw_affiliation_string":"University of Oslo, Gaustadall\u00e9en 23B, 0373, Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]},{"raw_affiliation_string":"UiO - University of Oslo (P.O 1072 Blindern 0316 Oslo - Norway)","institution_ids":["https://openalex.org/I184942183"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085741749","display_name":"Hoai Viet Nguyen","orcid":"https://orcid.org/0000-0002-6540-5389"},"institutions":[{"id":"https://openalex.org/I155417937","display_name":"Hochschule Bonn-Rhein-Sieg","ror":"https://ror.org/04m2anh63","country_code":"DE","type":"education","lineage":["https://openalex.org/I155417937"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hoai Viet Nguyen","raw_affiliation_strings":["Hochschule Bonn-Rhein-Sieg, Grantham-Allee 20, 53757, Sankt Augustin, Germany","H-BRS - Hochschule Bonn Rhein-Sieg University of Applied Sciences [Sankt Augustin] (Hochschule Bonn-Rhein-Sieg : Grantham-Allee 20 53757 Sankt Augustin - Germany - Germany)"],"raw_orcid":"https://orcid.org/0000-0002-6540-5389","affiliations":[{"raw_affiliation_string":"Hochschule Bonn-Rhein-Sieg, Grantham-Allee 20, 53757, Sankt Augustin, Germany","institution_ids":["https://openalex.org/I155417937"]},{"raw_affiliation_string":"H-BRS - Hochschule Bonn Rhein-Sieg University of Applied Sciences [Sankt Augustin] (Hochschule Bonn-Rhein-Sieg : Grantham-Allee 20 53757 Sankt Augustin - Germany - Germany)","institution_ids":["https://openalex.org/I155417937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078229046","display_name":"Nils Gruschka","orcid":"https://orcid.org/0000-0001-7360-8314"},"institutions":[{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Nils Gruschka","raw_affiliation_strings":["University of Oslo, Gaustadall\u00e9en 23B, 0373, Oslo, Norway","UiO - University of Oslo (P.O 1072 Blindern 0316 Oslo - Norway)"],"raw_orcid":"https://orcid.org/0000-0001-7360-8314","affiliations":[{"raw_affiliation_string":"University of Oslo, Gaustadall\u00e9en 23B, 0373, Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]},{"raw_affiliation_string":"UiO - University of Oslo (P.O 1072 Blindern 0316 Oslo - Norway)","institution_ids":["https://openalex.org/I184942183"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037591969","display_name":"Luigi Lo Iacono","orcid":"https://orcid.org/0000-0002-7863-0622"},"institutions":[{"id":"https://openalex.org/I155417937","display_name":"Hochschule Bonn-Rhein-Sieg","ror":"https://ror.org/04m2anh63","country_code":"DE","type":"education","lineage":["https://openalex.org/I155417937"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Luigi Lo Iacono","raw_affiliation_strings":["Hochschule Bonn-Rhein-Sieg, Grantham-Allee 20, 53757, Sankt Augustin, Germany","H-BRS - Hochschule Bonn Rhein-Sieg University of Applied Sciences [Sankt Augustin] (Hochschule Bonn-Rhein-Sieg : Grantham-Allee 20 53757 Sankt Augustin - Germany - Germany)"],"raw_orcid":"https://orcid.org/0000-0002-7863-0622","affiliations":[{"raw_affiliation_string":"Hochschule Bonn-Rhein-Sieg, Grantham-Allee 20, 53757, Sankt Augustin, Germany","institution_ids":["https://openalex.org/I155417937"]},{"raw_affiliation_string":"H-BRS - Hochschule Bonn Rhein-Sieg University of Applied Sciences [Sankt Augustin] (Hochschule Bonn-Rhein-Sieg : Grantham-Allee 20 53757 Sankt Augustin - Germany - Germany)","institution_ids":["https://openalex.org/I155417937"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"332","last_page":"347"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8145023584365845},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.6841162443161011},{"id":"https://openalex.org/keywords/kerberos","display_name":"Kerberos","score":0.5272599458694458},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.46005508303642273},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4592535197734833},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3629341423511505},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3606928884983063},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.27707433700561523}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8145023584365845},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.6841162443161011},{"id":"https://openalex.org/C32455479","wikidata":"https://www.wikidata.org/wiki/Q506053","display_name":"Kerberos","level":3,"score":0.5272599458694458},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.46005508303642273},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4592535197734833},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3629341423511505},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3606928884983063},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.27707433700561523}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/978-3-030-78120-0_22","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-030-78120-0_22","pdf_url":null,"source":{"id":"https://openalex.org/S4210185096","display_name":"IFIP advances in information and communication technology","issn_l":"1868-422X","issn":["1868-422X","1868-4238"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},{"id":"pmh:oai:pub.h-brs.de:5549","is_oa":true,"landing_page_url":"https://pub.h-brs.de/frontdoor/index/index/docId/5549","pdf_url":"https://nbn-resolving.org/urn:nbn:de:hbz:1044-opus-55491","source":{"id":"https://openalex.org/S4306400385","display_name":"Publication Server of Bonn-Rhein-Sieg University of Applied Sciences (Bonn-Rhein-Sieg University of Applied Sciences)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I135140700","host_organization_name":"University of Bonn","host_organization_lineage":["https://openalex.org/I135140700"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"SEC 2021: ICT Systems Security and Privacy Protection pp 332-347","raw_type":"conferenceobject"},{"id":"pmh:oai:HAL:hal-03746058v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-03746058","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.332-347, ⟨10.1007/978-3-030-78120-0_22⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:pub.h-brs.de:5549","is_oa":true,"landing_page_url":"https://pub.h-brs.de/frontdoor/index/index/docId/5549","pdf_url":"https://nbn-resolving.org/urn:nbn:de:hbz:1044-opus-55491","source":{"id":"https://openalex.org/S4306400385","display_name":"Publication Server of Bonn-Rhein-Sieg University of Applied Sciences (Bonn-Rhein-Sieg University of Applied Sciences)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I135140700","host_organization_name":"University of Bonn","host_organization_lineage":["https://openalex.org/I135140700"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"SEC 2021: ICT Systems Security and Privacy Protection pp 332-347","raw_type":"conferenceobject"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6800000071525574,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3176933418.pdf","grobid_xml":"https://content.openalex.org/works/W3176933418.grobid-xml"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W45826981","https://openalex.org/W1711031530","https://openalex.org/W1886854944","https://openalex.org/W2000063445","https://openalex.org/W2065076704","https://openalex.org/W2095881341","https://openalex.org/W2139740492","https://openalex.org/W2145357146","https://openalex.org/W2233222076","https://openalex.org/W2291769357","https://openalex.org/W2538556898","https://openalex.org/W2542841167","https://openalex.org/W2809183419","https://openalex.org/W2897005587","https://openalex.org/W2987467625","https://openalex.org/W3008219187","https://openalex.org/W3024624015","https://openalex.org/W3048918823","https://openalex.org/W3081535332","https://openalex.org/W4205200683","https://openalex.org/W6906355099"],"related_works":["https://openalex.org/W2394359997","https://openalex.org/W2739313573","https://openalex.org/W2031148862","https://openalex.org/W1540917895","https://openalex.org/W1983288955","https://openalex.org/W2372879518","https://openalex.org/W2101816580","https://openalex.org/W2350950651","https://openalex.org/W4386108990","https://openalex.org/W4388241519"],"abstract_inverted_index":null,"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}