{"id":"https://openalex.org/W2901837432","doi":"https://doi.org/10.1109/access.2018.2881070","title":"A Web Second-Order Vulnerabilities Detection Method","display_name":"A Web Second-Order Vulnerabilities Detection Method","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2901837432","doi":"https://doi.org/10.1109/access.2018.2881070","mag":"2901837432"},"language":"en","primary_location":{"id":"doi:10.1109/access.2018.2881070","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2881070","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2018.2881070","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064138284","display_name":"Miao Liu","orcid":"https://orcid.org/0000-0003-2259-9782"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Miao Liu","raw_affiliation_strings":["School of Computer Science and Educational Software, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2259-9782","affiliations":[{"raw_affiliation_string":"School of Computer Science and Educational Software, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057664591","display_name":"Bin Wang","orcid":"https://orcid.org/0000-0003-2745-3889"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Wang","raw_affiliation_strings":["School of Computer Science and Educational Software, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Educational Software, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I37987034"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.4161,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.91937335,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"6","issue":null,"first_page":"70983","last_page":"70988"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7934384346008301},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.6792464256286621},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.620587944984436},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.578453540802002},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.5537965893745422},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.42063260078430176},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.4195675849914551},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3750530779361725},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.277351438999176},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.24319615960121155},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.14250388741493225},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.13937273621559143}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7934384346008301},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.6792464256286621},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.620587944984436},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.578453540802002},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.5537965893745422},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.42063260078430176},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.4195675849914551},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3750530779361725},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.277351438999176},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.24319615960121155},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.14250388741493225},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.13937273621559143},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2018.2881070","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2881070","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:2fdf5e97d6cd4f6ba77614bd15b137a1","is_oa":true,"landing_page_url":"https://doaj.org/article/2fdf5e97d6cd4f6ba77614bd15b137a1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 6, Pp 70983-70988 (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2018.2881070","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2881070","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6600000262260437,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1429964360","https://openalex.org/W1971111941","https://openalex.org/W1979931683","https://openalex.org/W2049123707","https://openalex.org/W2134135191","https://openalex.org/W2181379919","https://openalex.org/W2613291502","https://openalex.org/W2768445080","https://openalex.org/W2785432546","https://openalex.org/W2803831611","https://openalex.org/W2891367523","https://openalex.org/W2927870364","https://openalex.org/W4285719527","https://openalex.org/W6628190228","https://openalex.org/W6685865359","https://openalex.org/W6761416733"],"related_works":["https://openalex.org/W1978034799","https://openalex.org/W2007984522","https://openalex.org/W4384518368","https://openalex.org/W2150933192","https://openalex.org/W125279808","https://openalex.org/W4385770215","https://openalex.org/W2070218579","https://openalex.org/W2265061089","https://openalex.org/W149873063","https://openalex.org/W2884169589"],"abstract_inverted_index":{"Second-order":[0],"vulnerabilities":[1,43,76,94],"are":[2],"more":[3,6],"subtle":[4],"and":[5,14,22,71,95],"destructive":[7],"than":[8],"the":[9,16,50,54,63,68,86,99],"first-order":[10],"vulnerabilities.":[11,36,108],"After":[12],"researching":[13],"analyzing":[15],"principles":[17],"of":[18,62,89,101],"web":[19,33,40,74,92,105],"penetration":[20],"testing":[21],"second-order":[23,34,41,73,91,107],"attack":[24],"principles,":[25],"this":[26],"paper":[27],"proposes":[28],"a":[29],"method":[30,38],"to":[31,103],"detect":[32,104],"security":[35,42,75,93,106],"The":[37,82],"detects":[39,72],"through":[44],"two":[45],"crawl":[46],"scans.":[47],"It":[48],"crawls":[49,60],"website":[51],"URL":[52],"for":[53,67,78,98],"first":[55],"time,":[56,70],"sends":[57],"anchor":[58,65],"points,":[59],"URLs":[61],"storage":[64],"point":[66],"second":[69],"specifically":[77],"these":[79],"suspicious":[80],"URLs.":[81],"approach":[83],"greatly":[84],"reduces":[85],"time":[87],"complexity":[88],"detecting":[90],"makes":[96],"up":[97],"lack":[100],"methods":[102]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}