{"id":"https://openalex.org/W2960854187","doi":"https://doi.org/10.1109/compsac.2019.00116","title":"Raising the Bar Really High: An MTD Approach to Protect Data in Embedded Browsers","display_name":"Raising the Bar Really High: An MTD Approach to Protect Data in Embedded Browsers","publication_year":2019,"publication_date":"2019-07-01","ids":{"openalex":"https://openalex.org/W2960854187","doi":"https://doi.org/10.1109/compsac.2019.00116","mag":"2960854187"},"language":"en","primary_location":{"id":"doi:10.1109/compsac.2019.00116","is_oa":false,"landing_page_url":"https://doi.org/10.1109/compsac.2019.00116","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 43rd Annual Computer Software and Applications Conference (COMPSAC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018845377","display_name":"Fadi Mohsen","orcid":"https://orcid.org/0000-0003-3876-5781"},"institutions":[{"id":"https://openalex.org/I4210092198","display_name":"University of Michigan\u2013Flint","ror":"https://ror.org/01c3xc117","country_code":"US","type":"education","lineage":["https://openalex.org/I4210092198"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fadi Mohsen","raw_affiliation_strings":["Department of Computer Science, Eng., and Physics, University of Michigan-Flint, Flint, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Eng., and Physics, University of Michigan-Flint, Flint, MI, USA","institution_ids":["https://openalex.org/I4210092198"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043844338","display_name":"Haadi Jafaarian","orcid":null},"institutions":[{"id":"https://openalex.org/I4210092198","display_name":"University of Michigan\u2013Flint","ror":"https://ror.org/01c3xc117","country_code":"US","type":"education","lineage":["https://openalex.org/I4210092198"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haadi Jafaarian","raw_affiliation_strings":["Department of Computer Science, Eng., and Physics, University of Michigan-Flint, Flint, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Eng., and Physics, University of Michigan-Flint, Flint, MI, USA","institution_ids":["https://openalex.org/I4210092198"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210092198"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.065007,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":null,"first_page":"786","last_page":"794"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7685093283653259},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6923621296882629},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6053655743598938},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.5799269676208496},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.4838896691799164},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4703255891799927},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.46717438101768494},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.4420326352119446},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24941208958625793}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7685093283653259},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6923621296882629},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6053655743598938},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.5799269676208496},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.4838896691799164},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4703255891799927},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.46717438101768494},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.4420326352119446},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24941208958625793},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/compsac.2019.00116","is_oa":false,"landing_page_url":"https://doi.org/10.1109/compsac.2019.00116","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 43rd Annual Computer Software and Applications Conference (COMPSAC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6100000143051147,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W36948825","https://openalex.org/W164984320","https://openalex.org/W1521175893","https://openalex.org/W1612694023","https://openalex.org/W1974977720","https://openalex.org/W2023891088","https://openalex.org/W2046312985","https://openalex.org/W2058664481","https://openalex.org/W2090846184","https://openalex.org/W2098010707","https://openalex.org/W2101699859","https://openalex.org/W2109878465","https://openalex.org/W2125011234","https://openalex.org/W2167661907","https://openalex.org/W2168563136","https://openalex.org/W2177808409","https://openalex.org/W2197836422","https://openalex.org/W2200302304","https://openalex.org/W2225436211","https://openalex.org/W2248426850","https://openalex.org/W2256200255","https://openalex.org/W2296473644","https://openalex.org/W2494110282","https://openalex.org/W2555331720","https://openalex.org/W2568450807","https://openalex.org/W2606751384","https://openalex.org/W2618771940","https://openalex.org/W2766183686","https://openalex.org/W2888390988","https://openalex.org/W2888684172","https://openalex.org/W3106490093","https://openalex.org/W6688731086","https://openalex.org/W6691502292","https://openalex.org/W6691920562","https://openalex.org/W6786307856"],"related_works":["https://openalex.org/W2461078469","https://openalex.org/W123790205","https://openalex.org/W2085515337","https://openalex.org/W3087706721","https://openalex.org/W4287664162","https://openalex.org/W3102852402","https://openalex.org/W827014118","https://openalex.org/W4385695489","https://openalex.org/W2498635018","https://openalex.org/W2808406842"],"abstract_inverted_index":{"The":[0,158,178,199],"safety":[1],"of":[2,10,16,46,84,114,124,129,151,201,217],"web":[3,69,104],"browsers":[4],"is":[5,116],"essential":[6],"to":[7,66,78,81,101,107,120,147,185],"the":[8,14,21,68,99,103,121,127,130,149,175,186,213],"privacy":[9],"Internet":[11],"users":[12],"and":[13,36,43,139,168,170,204,215],"security":[15,205],"their":[17,166],"computing":[18],"systems.":[19],"In":[20,133],"last":[22],"few":[23],"years,":[24],"there":[25],"have":[26,50],"been":[27,51,76],"several":[28],"cyber":[29],"attacks":[30,154],"geared":[31],"towards":[32],"compromising":[33],"surfers'":[34],"data":[35],"systems":[37,49],"via":[38],"exploiting":[39],"browser-based":[40],"vulnerabilities.":[41],"Android":[42],"a":[44,53,141],"number":[45],"mobile":[47,64,156],"operating":[48],"supporting":[52],"UI":[54],"component":[55,74],"called":[56],"WebView,":[57],"which":[58],"can":[59,94],"be":[60,79],"embedded":[61],"in":[62,90],"any":[63,183],"application":[65],"render":[67],"contents.":[70],"Yet,":[71],"this":[72,134],"mini-browser":[73],"has":[75],"found":[77],"vulnerable":[80],"various":[82],"kinds":[83],"attacks.":[85],"For":[86],"instance,":[87],"an":[88],"attacker":[89],"her":[91],"WebView-Embedded":[92],"app":[93],"inject":[95],"malicious":[96],"JavaScripts":[97],"into":[98],"WebView":[100],"modify":[102],"contents":[105],"or":[106,188],"steal":[108],"user's":[109],"input":[110,219],"values.":[111],"This":[112],"kind":[113],"attack":[115],"particularly":[117],"challenging":[118],"due":[119],"full":[122],"control":[123],"attackers":[125],"over":[126],"content":[128],"loaded":[131],"pages.":[132],"paper,":[135],"we":[136],"are":[137],"proposing":[138],"testing":[140],"server-side":[142],"moving":[143],"target":[144],"defense":[145],"technique":[146],"counter":[148],"risk":[150],"JavaScript":[152],"injection":[153],"on":[155],"WebViews.":[157],"solution":[159,179],"entails":[160],"creating":[161],"redundant":[162],"HTML":[163],"forms,":[164],"randomizing":[165],"attributes":[167],"values,":[169],"asserting":[171],"stealthy":[172],"prompts":[173],"for":[174],"user":[176,218],"data.":[177],"does":[180],"not":[181],"dictate":[182],"changes":[184],"browser":[187],"applications":[189],"codes,":[190],"neither":[191],"it":[192],"requires":[193],"key":[194],"sharing":[195],"with":[196,221],"benign":[197],"clients.":[198],"results":[200],"our":[202,209],"performance":[203],"analysis":[206],"suggest":[207],"that":[208],"proposed":[210],"approach":[211],"protects":[212],"confidentiality":[214],"integrity":[216],"values":[220],"minimum":[222],"overhead.":[223]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}