{"id":"https://openalex.org/W2952419531","doi":"https://doi.org/10.1007/s10207-019-00442-1","title":"DOMtegrity: ensuring web page integrity against malicious browser extensions","display_name":"DOMtegrity: ensuring web page integrity against malicious browser extensions","publication_year":2019,"publication_date":"2019-06-11","ids":{"openalex":"https://openalex.org/W2952419531","doi":"https://doi.org/10.1007/s10207-019-00442-1","mag":"2952419531","pmid":"https://pubmed.ncbi.nlm.nih.gov/31632229"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-019-00442-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-019-00442-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-019-00442-1.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-019-00442-1.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029147151","display_name":"Ehsan Toreini","orcid":"https://orcid.org/0000-0002-5172-2957"},"institutions":[{"id":"https://openalex.org/I84884186","display_name":"Newcastle University","ror":"https://ror.org/01kj2bm70","country_code":"GB","type":"education","lineage":["https://openalex.org/I84884186"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Ehsan Toreini","raw_affiliation_strings":["1School of Computing, Newcastle University, Newcastle upon Tyne, UK","School of Computing, Newcastle University, Newcastle upon Tyne, UK"],"raw_orcid":"https://orcid.org/0000-0002-5172-2957","affiliations":[{"raw_affiliation_string":"1School of Computing, Newcastle University, Newcastle upon Tyne, UK","institution_ids":["https://openalex.org/I84884186"]},{"raw_affiliation_string":"School of Computing, Newcastle University, Newcastle upon Tyne, UK","institution_ids":["https://openalex.org/I84884186"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056489873","display_name":"Siamak F. Shahandashti","orcid":"https://orcid.org/0000-0002-5284-6847"},"institutions":[{"id":"https://openalex.org/I52099693","display_name":"University of York","ror":"https://ror.org/04m01e293","country_code":"GB","type":"education","lineage":["https://openalex.org/I52099693"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Siamak F. Shahandashti","raw_affiliation_strings":["2Department of Computer Science, University of York, York, UK","Department of Computer Science, University of York, York, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"2Department of Computer Science, University of York, York, UK","institution_ids":["https://openalex.org/I52099693"]},{"raw_affiliation_string":"Department of Computer Science, University of York, York, UK","institution_ids":["https://openalex.org/I52099693"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023973244","display_name":"Maryam Mehrnezhad","orcid":"https://orcid.org/0000-0002-4223-6885"},"institutions":[{"id":"https://openalex.org/I84884186","display_name":"Newcastle University","ror":"https://ror.org/01kj2bm70","country_code":"GB","type":"education","lineage":["https://openalex.org/I84884186"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Maryam Mehrnezhad","raw_affiliation_strings":["1School of Computing, Newcastle University, Newcastle upon Tyne, UK","School of Computing, Newcastle University, Newcastle upon Tyne, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"1School of Computing, Newcastle University, Newcastle upon Tyne, UK","institution_ids":["https://openalex.org/I84884186"]},{"raw_affiliation_string":"School of Computing, Newcastle University, Newcastle upon Tyne, UK","institution_ids":["https://openalex.org/I84884186"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100611635","display_name":"Feng Hao","orcid":"https://orcid.org/0000-0002-8664-5074"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Feng Hao","raw_affiliation_strings":["3Department of Computer Science, University of Warwick, Coventry, UK","Department of Computer Science, University of Warwick, Coventry, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"3Department of Computer Science, University of Warwick, Coventry, UK","institution_ids":["https://openalex.org/I39555362"]},{"raw_affiliation_string":"Department of Computer Science, University of Warwick, Coventry, UK","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5029147151"],"corresponding_institution_ids":["https://openalex.org/I84884186"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":2.6913,"has_fulltext":true,"cited_by_count":21,"citation_normalized_percentile":{"value":0.92319461,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"18","issue":"6","first_page":"801","last_page":"814"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8178988695144653},{"id":"https://openalex.org/keywords/client-side-scripting","display_name":"Client-side scripting","score":0.6957907676696777},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.6704637408256531},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5698336958885193},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.5461597442626953},{"id":"https://openalex.org/keywords/web-navigation","display_name":"Web navigation","score":0.5052211880683899},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48505133390426636},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.4823172092437744},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.4706914722919464},{"id":"https://openalex.org/keywords/web-api","display_name":"Web API","score":0.4558105170726776},{"id":"https://openalex.org/keywords/data-integrity","display_name":"Data integrity","score":0.4394863247871399},{"id":"https://openalex.org/keywords/web-browser","display_name":"Web browser","score":0.43802398443222046},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4298556447029114},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3592471480369568},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.35036927461624146}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8178988695144653},{"id":"https://openalex.org/C195274430","wikidata":"https://www.wikidata.org/wiki/Q1650567","display_name":"Client-side scripting","level":5,"score":0.6957907676696777},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.6704637408256531},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5698336958885193},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.5461597442626953},{"id":"https://openalex.org/C61096286","wikidata":"https://www.wikidata.org/wiki/Q7978592","display_name":"Web navigation","level":3,"score":0.5052211880683899},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48505133390426636},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.4823172092437744},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.4706914722919464},{"id":"https://openalex.org/C127613066","wikidata":"https://www.wikidata.org/wiki/Q557770","display_name":"Web API","level":4,"score":0.4558105170726776},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.4394863247871399},{"id":"https://openalex.org/C2983909278","wikidata":"https://www.wikidata.org/wiki/Q6368","display_name":"Web browser","level":3,"score":0.43802398443222046},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4298556447029114},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3592471480369568},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.35036927461624146}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1007/s10207-019-00442-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-019-00442-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-019-00442-1.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmid:31632229","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/31632229","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International journal of information security","raw_type":null},{"id":"pmh:oai:eprints.whiterose.ac.uk:147133","is_oa":true,"landing_page_url":"https://orcid.org/0000-0002-5284-6847>","pdf_url":"https://eprints.whiterose.ac.uk/147133/8/Toreini2019_Article_DOMtegrityEnsuringWebPageInteg.pdf","source":{"id":"https://openalex.org/S4306400854","display_name":"White Rose Research Online (University of Leeds, The University of Sheffield, University of York)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2800616092","host_organization_name":"White Rose University Consortium","host_organization_lineage":["https://openalex.org/I2800616092"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:pubmedcentral.nih.gov:6777511","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/6777511","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Int J Inf Secur","raw_type":"Text"},{"id":"pmh:oai:durham-repository.worktribe.com:1255842","is_oa":true,"landing_page_url":"https://durham-repository.worktribe.com/output/1255842","pdf_url":null,"source":{"id":"https://openalex.org/S4306400188","display_name":"Durham Research Online (Durham University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I190082696","host_organization_name":"Durham University","host_organization_lineage":["https://openalex.org/I190082696"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":{"id":"doi:10.1007/s10207-019-00442-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-019-00442-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-019-00442-1.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4300000071525574,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G4734878561","display_name":"Academic Centre of Excellence in Cyber Security Research - University of Warwick","funder_award_id":"EP/R007195/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G7129535049","display_name":null,"funder_award_id":"ERC Starting Grant (No. 306994)","funder_id":"https://openalex.org/F4320334678","funder_display_name":"European Research Council"},{"id":"https://openalex.org/G7282611729","display_name":null,"funder_award_id":"EP/R007195/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320334678","display_name":"European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2952419531.pdf","grobid_xml":"https://content.openalex.org/works/W2952419531.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W105048401","https://openalex.org/W126333765","https://openalex.org/W142368155","https://openalex.org/W186100614","https://openalex.org/W626019294","https://openalex.org/W1688725932","https://openalex.org/W1887482550","https://openalex.org/W2024716653","https://openalex.org/W2040977706","https://openalex.org/W2048884875","https://openalex.org/W2086466471","https://openalex.org/W2111015674","https://openalex.org/W2112459589","https://openalex.org/W2125591927","https://openalex.org/W2141462871","https://openalex.org/W2169771430","https://openalex.org/W2186294736","https://openalex.org/W2189652372","https://openalex.org/W2404981861","https://openalex.org/W2755292383","https://openalex.org/W2963619203","https://openalex.org/W3104057340"],"related_works":["https://openalex.org/W153860273","https://openalex.org/W2103668392","https://openalex.org/W2006586554","https://openalex.org/W2031340751","https://openalex.org/W3203975066","https://openalex.org/W1566985031","https://openalex.org/W4242097731","https://openalex.org/W2238130692","https://openalex.org/W2104369383","https://openalex.org/W2331255134"],"abstract_inverted_index":{"In":[0],"this":[1,94],"paper,":[2],"we":[3,96],"address":[4,93],"an":[5],"unsolved":[6],"problem":[7,32],"in":[8,21,24,128],"the":[9,15,18,25,55,58,61,81,84,105,109,123,126,129,134,143,170,192],"real":[10],"world:":[11],"how":[12,167],"to":[13,38,50,103,122,190],"ensure":[14,104],"integrity":[16,107,140],"of":[17,27,33,57,60,83,108,112,125,177,194],"web":[19,62,85,114,120],"content":[20,63,86],"a":[22,98,113,119,174],"browser":[23,29,144,159],"presence":[26],"malicious":[28,39],"extensions?":[30],"The":[31],"exposing":[34],"confidential":[35],"user":[36],"credentials":[37],"extensions":[40,160,189],"has":[41,46,64],"been":[42],"widely":[43],"understood,":[44],"which":[45],"prompted":[47],"major":[48],"banks":[49],"deploy":[51],"two-factor":[52,90],"authentication.":[53],"However,":[54],"importance":[56],"\"integrity\"":[59,82],"received":[65],"little":[66],"attention.":[67],"We":[68,165,180],"implement":[69],"two":[70],"attacks":[71,172],"on":[72,184],"real-world":[73,188],"online":[74],"banking":[75],"websites":[76],"and":[77,161,173],"show":[78,166],"that":[79,137],"ignoring":[80],"can":[87],"fundamentally":[88],"defeat":[89],"solutions.":[91],"To":[92],"problem,":[95],"propose":[97],"cryptographic":[99],"protocol":[100],"called":[101],"DOMtegrity":[102,132,168],"end-to-end":[106],"DOM":[110,139],"structure":[111],"page":[115,127],"from":[116],"delivering":[117],"at":[118],"server":[121],"rendering":[124],"user's":[130],"browser.":[131],"is":[133],"first":[135],"solution":[136],"protects":[138],"without":[141],"modifying":[142],"architecture":[145],"or":[146],"requiring":[147],"extra":[148],"hardware.":[149],"It":[150],"works":[151],"by":[152],"exploiting":[153],"subtle":[154],"yet":[155],"important":[156],"differences":[157],"between":[158],"in-line":[162],"JavaScript":[163],"code.":[164],"prevents":[169],"earlier":[171],"whole":[175],"range":[176],"man-in-the-browser":[178],"attacks.":[179],"conduct":[181],"extensive":[182],"experiments":[183],"more":[185],"than":[186],"14,000":[187],"evaluate":[191],"effectiveness":[193],"DOMtegrity.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3}],"updated_date":"2026-08-15T07:11:24.734988","created_date":"2025-10-10T00:00:00"}