{"id":"https://openalex.org/W3023916045","doi":"https://doi.org/10.1016/s1353-4858(16)30016-2","title":"Web vulnerabilities: identifying patterns and remedies","display_name":"Web vulnerabilities: identifying patterns and remedies","publication_year":2016,"publication_date":"2016-02-01","ids":{"openalex":"https://openalex.org/W3023916045","doi":"https://doi.org/10.1016/s1353-4858(16)30016-2","mag":"3023916045"},"language":"en","primary_location":{"id":"doi:10.1016/s1353-4858(16)30016-2","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(16)30016-2","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069842564","display_name":"Ian Muscat","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Ian Muscat","raw_affiliation_strings":["Acunetix"],"affiliations":[{"raw_affiliation_string":"Acunetix","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5069842564"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.6539,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.92716178,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2016","issue":"2","first_page":"5","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9534000158309937,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9534000158309937,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9214000105857849,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9187999963760376,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/casual","display_name":"Casual","score":0.8923922777175903},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6117213368415833},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5722475647926331},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.5235847234725952},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4658988416194916},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4317626953125},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.42984163761138916},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3876400589942932},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.23610714077949524},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.17423555254936218},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.10555562376976013},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.0690971314907074},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.06400519609451294}],"concepts":[{"id":"https://openalex.org/C2781426162","wikidata":"https://www.wikidata.org/wiki/Q2275793","display_name":"Casual","level":2,"score":0.8923922777175903},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6117213368415833},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5722475647926331},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.5235847234725952},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4658988416194916},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4317626953125},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.42984163761138916},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3876400589942932},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.23610714077949524},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.17423555254936218},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.10555562376976013},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0690971314907074},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.06400519609451294},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/s1353-4858(16)30016-2","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(16)30016-2","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6100000143051147,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W1005754617","https://openalex.org/W2979523788","https://openalex.org/W756683672","https://openalex.org/W2490317329","https://openalex.org/W3141514971","https://openalex.org/W1673318806","https://openalex.org/W2166929399","https://openalex.org/W3124834840","https://openalex.org/W2098721272","https://openalex.org/W3200895730"],"abstract_inverted_index":{"Nearly":[0,48],"half":[1,37,49],"of":[2,38,50,80,121],"all":[3,51],"websites":[4,52],"have":[5,53],"high":[6],"security":[7,55],"vulnerabilities,":[8,56],"many":[9,57],"simple":[10,58],"to":[11,21,24,27,43,59,69,72,75,113],"fix":[12,60],"and":[13,61,87,102,110],"often":[14,62],"with":[15,63],"legacy":[16,64],"bugs":[17,65],"that":[18,35,66],"were":[19,67],"thought":[20,68],"be":[22,70],"consigned":[23,71],"history,":[25,73],"according":[26,74],"new":[28,76,129],"research.":[29,77],"In":[30],"addition,":[31],"such":[32],"vulnerabilities":[33,103],"mean":[34],"over":[36],"the":[39,85,93],"organisations":[40],"scanned":[41],"fail":[42],"meet":[44],"PCI":[45],"compliance":[46],"requirements.":[47],"high-risk":[54],"Ian":[78],"Muscat":[79],"Acunetix":[81],"takes":[82],"us":[83],"through":[84],"research":[86],"concludes":[88],"that,":[89],"far":[90],"from":[91],"reducing":[92],"risks,":[94],"companies":[95],"are":[96,104,131],"taking":[97],"too":[98],"casual":[99],"an":[100],"approach":[101],"now":[105],"worse":[106,127],"than":[107],"ever.":[108],"CSOs":[109],"CISOs":[111],"need":[112],"take":[114],"immediate":[115],"preventative":[116],"action":[117],"as":[118,128],"this":[119],"problem":[120],"unsecured":[122],"apps":[123],"will":[124],"only":[125],"get":[126],"technologies":[130],"adopted.":[132]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
