{"id":"https://openalex.org/W2073346309","doi":"https://doi.org/10.1016/s1353-4858(11)70050-2","title":"Spying on the browser: dissecting the design of malicious extensions","display_name":"Spying on the browser: dissecting the design of malicious extensions","publication_year":2011,"publication_date":"2011-05-01","ids":{"openalex":"https://openalex.org/W2073346309","doi":"https://doi.org/10.1016/s1353-4858(11)70050-2","mag":"2073346309"},"language":"en","primary_location":{"id":"doi:10.1016/s1353-4858(11)70050-2","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(11)70050-2","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062292211","display_name":"Aditya Sood","orcid":"https://orcid.org/0000-0003-3739-2012"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aditya K Sood","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036446758","display_name":"Richard Enbody","orcid":"https://orcid.org/0000-0002-2415-5651"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard J Enbody","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I87216513"],"apc_list":null,"apc_paid":null,"fwci":1.3136,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.80912181,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"2011","issue":"5","first_page":"8","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7630729675292969},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6832296252250671},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6531482934951782},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5965451598167419},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5658004283905029},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.5137122869491577},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4695083796977997},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.4453858435153961},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.41816246509552},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17239457368850708}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7630729675292969},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6832296252250671},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6531482934951782},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5965451598167419},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5658004283905029},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.5137122869491577},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4695083796977997},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.4453858435153961},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.41816246509552},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17239457368850708},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C129307140","wikidata":"https://www.wikidata.org/wiki/Q6795880","display_name":"Maximum bubble pressure method","level":3,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C157915830","wikidata":"https://www.wikidata.org/wiki/Q2928001","display_name":"Bubble","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/s1353-4858(11)70050-2","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(11)70050-2","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8100000023841858}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W1598325486","https://openalex.org/W2040977706","https://openalex.org/W2550028013"],"related_works":["https://openalex.org/W4366249425","https://openalex.org/W2900235625","https://openalex.org/W2053293719","https://openalex.org/W3083187169","https://openalex.org/W2594153842","https://openalex.org/W2990396213","https://openalex.org/W2902215642","https://openalex.org/W2795052090","https://openalex.org/W199776554","https://openalex.org/W4235738472"],"abstract_inverted_index":{"Browsers":[0,72],"are":[1,73,111,147],"a":[2,74,114,136,174,177],"vital":[3,75],"component":[4,76,125],"of":[5,22,28,38,77,100,106,116,142,201],"every":[6,78],"computer":[7,79],"system":[8,80],"as":[9,12,81,84,122],"they":[10,82],"serve":[11,83],"the":[13,16,19,26,36,85,88,97,104,127,143,155,167,171,202],"interface":[14,86],"to":[15,42,49,87,131,192],"Internet.":[17],"However,":[18,96],"extensible":[20,98],"nature":[21,99],"browsers":[23,46,62,101],"has":[24,102],"facilitated":[25,103],"proliferation":[27,105],"malware":[29,107],"infections.":[30,108],"In":[31,162],"this":[32],"article,":[33],"we":[34],"examine":[35],"design":[37],"malicious":[39,117,164,188,206],"extensions":[40,110,146,152,165,189],"used":[41,191],"steal":[43,193],"information":[44],"from":[45],"in":[47,126,129],"order":[48,130],"conduct":[50],"illegal":[51],"transactions.":[52],"The":[53],"focus":[54],"is":[55,138,199],"on":[56],"Mozilla's":[57,184],"Firefox":[58,185],"\u2013":[59],"but":[60,113],"other":[61],"that":[63,119],"share":[64,69],"these":[65,151,205],"characteristics":[66],"will":[67],"also":[68],"similar":[70],"vulnerabilities.":[71],"Internet,":[89],"explain":[90],"Aditya":[91],"Sood":[92],"and":[93,196],"Richard":[94],"Enbody.":[95],"Malicious":[109],"nothing":[112],"piece":[115],"code":[118],"installs":[120],"itself":[121],"an":[123,139],"inline":[124],"browser":[128,133,137,159,186],"exploit":[132,166],"capabilities.":[134],"Since":[135],"integral":[140],"part":[141],"client-side":[144],"framework,":[145],"platform":[148],"independent":[149],"because":[150],"communicate":[153],"with":[154,170,183],"operating":[156],"systems":[157],"using":[158],"access":[160],"rights.":[161],"general,":[163],"browser's":[168],"trust":[169],"website":[172],"when":[173],"user":[175],"initiates":[176],"session.":[178],"There":[179],"have":[180],"been":[181],"incidents":[182],"where":[187],"were":[190],"sensitive":[194],"information,":[195],"bank":[197],"fraud":[198],"one":[200],"targets":[203],"for":[204],"extensions.":[207]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}