{"id":"https://openalex.org/W4287884198","doi":"https://doi.org/10.1109/spw54247.2022.9833863","title":"Interactive History Sniffing with Dynamically-Generated QR Codes and CSS Difference Blending","display_name":"Interactive History Sniffing with Dynamically-Generated QR Codes and CSS Difference Blending","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W4287884198","doi":"https://doi.org/10.1109/spw54247.2022.9833863"},"language":"en","primary_location":{"id":"doi:10.1109/spw54247.2022.9833863","is_oa":false,"landing_page_url":"https://doi.org/10.1109/spw54247.2022.9833863","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081513651","display_name":"Keith O'Neal","orcid":null},"institutions":[{"id":"https://openalex.org/I161515732","display_name":"University of St. Thomas - Minnesota","ror":"https://ror.org/05vfxvp80","country_code":"US","type":"education","lineage":["https://openalex.org/I161515732"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Keith O'Neal","raw_affiliation_strings":["University of St. Thomas,St. Paul,USA","University of St. Thomas, St. Paul, USA"],"affiliations":[{"raw_affiliation_string":"University of St. Thomas,St. Paul,USA","institution_ids":["https://openalex.org/I161515732"]},{"raw_affiliation_string":"University of St. Thomas, St. Paul, USA","institution_ids":["https://openalex.org/I161515732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089444357","display_name":"Scott Yilek","orcid":null},"institutions":[{"id":"https://openalex.org/I161515732","display_name":"University of St. Thomas - Minnesota","ror":"https://ror.org/05vfxvp80","country_code":"US","type":"education","lineage":["https://openalex.org/I161515732"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Scott Yilek","raw_affiliation_strings":["University of St. Thomas,St. Paul,USA","University of St. Thomas, St. Paul, USA"],"affiliations":[{"raw_affiliation_string":"University of St. Thomas,St. Paul,USA","institution_ids":["https://openalex.org/I161515732"]},{"raw_affiliation_string":"University of St. Thomas, St. Paul, USA","institution_ids":["https://openalex.org/I161515732"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5081513651"],"corresponding_institution_ids":["https://openalex.org/I161515732"],"apc_list":null,"apc_paid":null,"fwci":0.7458,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.68360354,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"335","last_page":"341"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13270","display_name":"QR Code Applications and Technologies","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sniffing","display_name":"Sniffing","score":0.6821048855781555},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6063566207885742},{"id":"https://openalex.org/keywords/multimedia","display_name":"Multimedia","score":0.3399617671966553},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.08450660109519958}],"concepts":[{"id":"https://openalex.org/C131722271","wikidata":"https://www.wikidata.org/wiki/Q7547759","display_name":"Sniffing","level":2,"score":0.6821048855781555},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6063566207885742},{"id":"https://openalex.org/C49774154","wikidata":"https://www.wikidata.org/wiki/Q131765","display_name":"Multimedia","level":1,"score":0.3399617671966553},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.08450660109519958},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/spw54247.2022.9833863","is_oa":false,"landing_page_url":"https://doi.org/10.1109/spw54247.2022.9833863","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.75}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1603565383","https://openalex.org/W1729553147","https://openalex.org/W1957953031","https://openalex.org/W1965209910","https://openalex.org/W1975851306","https://openalex.org/W1980800818","https://openalex.org/W1998180710","https://openalex.org/W2040210405","https://openalex.org/W2078887804","https://openalex.org/W2125011234","https://openalex.org/W2560443936","https://openalex.org/W2563216732","https://openalex.org/W2888996757","https://openalex.org/W6753974513"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2062298518","https://openalex.org/W2471789880","https://openalex.org/W2324371505","https://openalex.org/W4213025019","https://openalex.org/W2107502469","https://openalex.org/W2057279595","https://openalex.org/W2061209439","https://openalex.org/W2356108554","https://openalex.org/W2889852084"],"abstract_inverted_index":{"In":[0],"a":[1,14,35,63,76,86,102,111,146,161,175],"user-assisted":[2,68,88],"history":[3,27,52,89,125,196],"sniffing":[4,53,90,197],"attack,":[5],"first":[6],"introduced":[7],"by":[8,28,201,212],"Weinberg,":[9],"Chen,":[10],"Jayaraman,":[11],"and":[12,164,206],"Jackson,":[13],"web":[15],"site":[16,104],"user":[17,182],"can":[18,57],"be":[19,129,185,209],"tricked":[20],"into":[21],"revealing":[22],"portions":[23],"of":[24,60,80,108,157,172,186],"their":[25],"browsing":[26,65,114],"performing":[29],"an":[30,155],"interactive":[31],"task,":[32],"like":[33],"solving":[34],"CAPTCHA":[36],"puzzle,":[37],"that":[38,194],"is":[39],"dynamically":[40,173],"generated":[41],"based":[42,92,121,179],"on":[43,93,122,180],"the":[44,123,133,158,167,195],"sites":[45,61],"they":[46],"have":[47,70],"recently":[48,199],"visited.":[49],"Unlike":[50],"automated":[51],"attacks,":[54],"which":[55],"often":[56],"probe":[58,106],"1000s":[59],"in":[62,160],"user\u2019s":[64,113,124],"history,":[66],"such":[67],"attacks":[69],"typically":[71],"been":[72],"limited":[73],"to":[74,105,128,132,144,153],"probing":[75],"much":[77],"smaller":[78],"number":[79],"sites.In":[81],"this":[82,139],"paper,":[83],"we":[84,141],"introduce":[85],"new":[87],"attack":[91],"malicious":[94,103,118],"QR":[95,99,119,162,177],"codes.":[96],"These":[97],"dynamically-generated":[98],"codes":[100,120],"allow":[101],"thousands":[107],"links":[109],"from":[110],"victim":[112],"history.":[115],"Generating":[116],"these":[117],"turns":[126],"out":[127],"challenging":[130],"due":[131],"required":[134],"error-correcting":[135,168],"properties.":[136],"To":[137],"overcome":[138],"issue,":[140],"show":[142],"how":[143],"use":[145],"recent":[147],"browser":[148,213],"feature,":[149],"CSS":[150],"difference":[151],"blending,":[152],"simulate":[154],"exclusive-OR":[156],"dots":[159],"code":[163,178],"correctly":[165],"generate":[166],"bits.":[169],"This":[170],"method":[171],"generating":[174],"valid":[176],"private":[181],"data":[183],"may":[184],"independent":[187],"interest.":[188],"Our":[189],"results":[190],"provide":[191],"further":[192],"evidence":[193],"defenses":[198],"proposed":[200],"Smith,":[202],"Disselkoen,":[203],"Narayan,":[204],"Brown,":[205],"Stefan":[207],"should":[208],"seriously":[210],"considered":[211],"vendors.":[214]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-03-17T09:09:15.849793","created_date":"2025-10-10T00:00:00"}