{"id":"https://openalex.org/W2899106578","doi":"https://doi.org/10.1109/pst.2018.8514180","title":"Mitigating CSRF attacks on OAuth 2.0 Systems","display_name":"Mitigating CSRF attacks on OAuth 2.0 Systems","publication_year":2018,"publication_date":"2018-08-01","ids":{"openalex":"https://openalex.org/W2899106578","doi":"https://doi.org/10.1109/pst.2018.8514180","mag":"2899106578"},"language":"en","primary_location":{"id":"doi:10.1109/pst.2018.8514180","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst.2018.8514180","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 16th Annual Conference on Privacy, Security and Trust (PST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015676987","display_name":"Wanpeng Li","orcid":"https://orcid.org/0000-0002-6396-9578"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Wanpeng Li","raw_affiliation_strings":["School of Computing, Mathematics, Digital Technology Manchester Metropolitan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, Mathematics, Digital Technology Manchester Metropolitan University","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063477888","display_name":"Chris J. Mitchell","orcid":"https://orcid.org/0000-0002-6118-0055"},"institutions":[{"id":"https://openalex.org/I184558857","display_name":"Royal Holloway University of London","ror":"https://ror.org/04g2vpn86","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I184558857"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Chris J Mitchell","raw_affiliation_strings":["Information Security Group Royal Holloway, University of London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Group Royal Holloway, University of London","institution_ids":["https://openalex.org/I184558857"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090198866","display_name":"Tom Chen","orcid":"https://orcid.org/0000-0001-8037-1685"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Thomas Chen","raw_affiliation_strings":["Department of Electrical, Electronic Engineering City, University of London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronic Engineering City, University of London","institution_ids":["https://openalex.org/I180825142"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6602,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.86754413,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7747483253479004},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.7335504293441772},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6218210458755493},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.48666244745254517},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4280727505683899},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.1376432478427887}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7747483253479004},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.7335504293441772},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6218210458755493},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.48666244745254517},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4280727505683899},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.1376432478427887}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/pst.2018.8514180","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst.2018.8514180","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 16th Annual Conference on Privacy, Security and Trust (PST)","raw_type":"proceedings-article"},{"id":"pmh:oai:openaccess.city.ac.uk:21570","is_oa":false,"landing_page_url":"https://openaccess.city.ac.uk/view/creators_id/tom=2Echen=2E1.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4306401940","display_name":"City Research Online (City University London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I180825142","host_organization_name":"City, University of London","host_organization_lineage":["https://openalex.org/I180825142"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Conference or Workshop Item"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W88388190","https://openalex.org/W1197495329","https://openalex.org/W1224296734","https://openalex.org/W1548312885","https://openalex.org/W1785797725","https://openalex.org/W1896223928","https://openalex.org/W2012921353","https://openalex.org/W2072978486","https://openalex.org/W2073828651","https://openalex.org/W2089775132","https://openalex.org/W2103475742","https://openalex.org/W2112995928","https://openalex.org/W2119085032","https://openalex.org/W2133723082","https://openalex.org/W2153106208","https://openalex.org/W2208621975","https://openalex.org/W2217843339","https://openalex.org/W2229250518","https://openalex.org/W2283736639","https://openalex.org/W2398053170","https://openalex.org/W2400427673","https://openalex.org/W6603591680","https://openalex.org/W6628128861","https://openalex.org/W6632997174","https://openalex.org/W6639493962","https://openalex.org/W6688448285","https://openalex.org/W6712380439"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2120447654","https://openalex.org/W2977179488","https://openalex.org/W2144453115","https://openalex.org/W2128223750","https://openalex.org/W4238532390","https://openalex.org/W2188872161","https://openalex.org/W2002978035","https://openalex.org/W797688974"],"abstract_inverted_index":{"Many":[0],"millions":[1],"of":[2,23,31,42],"users":[3],"routinely":[4],"use":[5],"Google,":[6],"Facebook":[7],"and":[8,26,50,66,81],"Microsoft":[9],"to":[10,13,48,53,73],"log":[11],"in":[12,51],"websites":[14],"supporting":[15],"OAuth":[16,24,79],"2.0":[17,25,80],"and/or":[18],"OpenID":[19,27,82],"Connect.":[20,83],"The":[21],"security":[22],"Connect":[28],"is":[29],"therefore":[30],"critical":[32],"importance.":[33],"Unfortunately,":[34],"as":[35],"previous":[36],"studies":[37],"have":[38],"shown,":[39],"real-world":[40],"implementations":[41],"both":[43,78],"schemes":[44],"are":[45],"often":[46],"vulnerable":[47],"attack,":[49],"particular":[52],"cross-site":[54],"request":[55],"forgery":[56],"(CSRF)":[57],"attacks.":[58],"In":[59],"this":[60],"paper":[61],"we":[62],"propose":[63],"a":[64],"new":[65],"practical":[67],"technique":[68],"which":[69],"can":[70],"be":[71],"used":[72],"mitigate":[74],"CSRF":[75],"attacks":[76],"against":[77]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}