{"id":"https://openalex.org/W2162316255","doi":"https://doi.org/10.1145/1141277.1141357","title":"Noxes","display_name":"Noxes","publication_year":2006,"publication_date":"2006-04-23","ids":{"openalex":"https://openalex.org/W2162316255","doi":"https://doi.org/10.1145/1141277.1141357","mag":"2162316255"},"language":"en","primary_location":{"id":"doi:10.1145/1141277.1141357","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1141277.1141357","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2006 ACM symposium on Applied computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077875821","display_name":"Engin Kirda","orcid":"https://orcid.org/0000-0001-9988-6873"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Engin Kirda","raw_affiliation_strings":["Technical University of Vienna"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Vienna","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["Technical University of Vienna"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Vienna","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["University of California, Santa Barbara"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080797120","display_name":"Nenad Jovanovi\u0107","orcid":"https://orcid.org/0000-0002-8872-7516"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Nenad Jovanovic","raw_affiliation_strings":["Technical University of Vienna"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Vienna","institution_ids":["https://openalex.org/I129774422"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":18.0981,"has_fulltext":false,"cited_by_count":294,"citation_normalized_percentile":{"value":0.99635701,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"330","last_page":"337"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.9488221406936646},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8470212817192078},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.7818959951400757},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6092131733894348},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.6032618880271912},{"id":"https://openalex.org/keywords/client-side","display_name":"Client-side","score":0.5176723003387451},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5148176550865173},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.47706782817840576},{"id":"https://openalex.org/keywords/client-side-scripting","display_name":"Client-side scripting","score":0.42821332812309265},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.3364807367324829},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.30175572633743286},{"id":"https://openalex.org/keywords/web-api","display_name":"Web API","score":0.25117945671081543},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2501014769077301},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.2181658148765564}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.9488221406936646},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8470212817192078},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.7818959951400757},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6092131733894348},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6032618880271912},{"id":"https://openalex.org/C202477664","wikidata":"https://www.wikidata.org/wiki/Q1352449","display_name":"Client-side","level":2,"score":0.5176723003387451},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5148176550865173},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.47706782817840576},{"id":"https://openalex.org/C195274430","wikidata":"https://www.wikidata.org/wiki/Q1650567","display_name":"Client-side scripting","level":5,"score":0.42821332812309265},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.3364807367324829},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.30175572633743286},{"id":"https://openalex.org/C127613066","wikidata":"https://www.wikidata.org/wiki/Q557770","display_name":"Web API","level":4,"score":0.25117945671081543},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2501014769077301},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.2181658148765564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1141277.1141357","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1141277.1141357","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2006 ACM symposium on Applied computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.75,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W195300121","https://openalex.org/W1983142587","https://openalex.org/W2003115932","https://openalex.org/W2006591097","https://openalex.org/W2161433768","https://openalex.org/W6684075216"],"related_works":["https://openalex.org/W2907490423","https://openalex.org/W187998727","https://openalex.org/W1531015913","https://openalex.org/W2187721372","https://openalex.org/W2326682353","https://openalex.org/W4319431564","https://openalex.org/W2148211687","https://openalex.org/W2046312985","https://openalex.org/W4361276211","https://openalex.org/W2143170946"],"abstract_inverted_index":{"Web":[0,29],"applications":[1,30],"are":[2,20,135,144],"becoming":[3],"the":[4,14,54,57,63,112,130,157,165,195,211,216,252],"dominant":[5],"way":[6],"to":[7,10,43,79,119,129,146,150,210,220,239],"provide":[8],"access":[9,80,118],"on-line":[11],"services.":[12],"At":[13],"same":[15],"time,":[16],"web":[17,41,59,229],"application":[18],"vulnerabilities":[19],"being":[21,180,202],"discovered":[22],"and":[23,125,152,231,235,260],"disclosed":[24],"at":[25],"an":[26,105],"alarming":[27],"rate.":[28],"often":[31],"make":[32],"use":[33],"of":[34,56,160,194,197,213],"JavaScript":[35,68,102,199],"code":[36,50,103,200],"that":[37,75,127,174],"is":[38,51,73,115,156,190],"embedded":[39],"into":[40,99,182],"pages":[42],"support":[44],"dynamic":[45],"client-side":[46,188,218],"behavior.":[47],"This":[48,204],"script":[49,114],"executed":[52],"in":[53],"context":[55],"user's":[58,64,253],"browser.":[60],"To":[61],"protect":[62],"environment":[65,254],"from":[66,104,179,251],"malicious":[67,101,113,177],"code,":[69],"a":[70,77,94,187,228],"sand-boxing":[71],"mechanism":[72],"used":[74],"limits":[76],"program":[78],"only":[81],"resources":[82,121],"associated":[83],"with":[84],"its":[85],"origin":[86],"site.":[87,108,132],"Unfortunately,":[88],"these":[89],"security":[90],"mechanisms":[91],"fail":[92],"if":[93],"user":[95,258],"can":[96],"be":[97],"lured":[98],"downloading":[100],"intermediate,":[106],"trusted":[107,131,183],"In":[109],"this":[110],"case,":[111],"granted":[116],"full":[117],"all":[120],"(e.g.,":[122],"authentication":[123],"tokens":[124],"cookies)":[126],"belong":[128],"Such":[133],"attacks":[134,143],"called":[136],"cross-site":[137,222,242],"scripting":[138,223,243],"(XSS)":[139],"attacks.In":[140],"general,":[141],"XSS":[142],"easy":[145,192],"execute,":[147],"but":[148],"difficult":[149],"detect":[151],"prevent.":[153],"One":[154],"reason":[155],"high":[158],"flexibility":[159],"HTML":[161],"encoding":[162],"schemes,":[163],"offering":[164],"attacker":[166],"many":[167],"possibilities":[168],"for":[169],"circumventing":[170],"server-side":[171],"input":[172],"filters":[173],"should":[175],"prevent":[176],"scripts":[178],"injected":[181],"sites.":[184],"Also,":[185],"devising":[186],"solution":[189,219],"not":[191],"because":[193],"difficulty":[196],"identifying":[198],"as":[201,227],"malicious.":[203],"paper":[205],"presents":[206],"Noxes,":[207],"which":[208],"is,":[209],"best":[212],"our":[214],"knowledge,":[215],"first":[217],"mitigate":[221,240],"attacks.":[224],"Noxes":[225,245],"acts":[226],"proxy":[230],"uses":[232],"both":[233],"manual":[234],"automatically":[236],"generated":[237],"rules":[238],"possible":[241],"attempts.":[244],"effectively":[246],"protects":[247],"against":[248],"information":[249],"leakage":[250],"while":[255],"requiring":[256],"minimal":[257],"interaction":[259],"customization":[261],"effort.":[262]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":9},{"year":2017,"cited_by_count":11},{"year":2016,"cited_by_count":13},{"year":2015,"cited_by_count":13},{"year":2014,"cited_by_count":36},{"year":2013,"cited_by_count":21},{"year":2012,"cited_by_count":31}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2016-06-24T00:00:00"}