{"id":"https://openalex.org/W2138628156","doi":"https://doi.org/10.1145/1315245.1315248","title":"An analysis of browser domain-isolation bugs and a light-weight transparent defense mechanism","display_name":"An analysis of browser domain-isolation bugs and a light-weight transparent defense mechanism","publication_year":2007,"publication_date":"2007-10-28","ids":{"openalex":"https://openalex.org/W2138628156","doi":"https://doi.org/10.1145/1315245.1315248","mag":"2138628156"},"language":"en","primary_location":{"id":"doi:10.1145/1315245.1315248","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1315245.1315248","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th ACM conference on Computer and communications security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100366855","display_name":"Shuo Chen","orcid":"https://orcid.org/0000-0002-0257-1240"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shuo Chen","raw_affiliation_strings":["Microsoft, Redmond, WA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft, Redmond, WA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113799799","display_name":"D. Ross","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Ross","raw_affiliation_strings":["Microsoft, Redmond, WA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft, Redmond, WA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100384240","display_name":"Yi\u2010Min Wang","orcid":"https://orcid.org/0009-0008-7292-0670"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yi-Min Wang","raw_affiliation_strings":["Microsoft, Redmond, WA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft, Redmond, WA","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1290206253"],"apc_list":null,"apc_paid":null,"fwci":3.7085,"has_fulltext":false,"cited_by_count":47,"citation_normalized_percentile":{"value":0.943244,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"2","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.760026752948761},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.7530011534690857},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7444219589233398},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5839118361473083},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5512566566467285},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.5217198133468628},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.48177286982536316},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4794248938560486},{"id":"https://openalex.org/keywords/client-side-scripting","display_name":"Client-side scripting","score":0.4253210723400116},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.41898825764656067},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.328945517539978},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24320298433303833},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.172905832529068},{"id":"https://openalex.org/keywords/web-navigation","display_name":"Web navigation","score":0.15246152877807617},{"id":"https://openalex.org/keywords/bioinformatics","display_name":"Bioinformatics","score":0.07437244057655334}],"concepts":[{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.760026752948761},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.7530011534690857},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7444219589233398},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5839118361473083},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5512566566467285},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.5217198133468628},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.48177286982536316},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4794248938560486},{"id":"https://openalex.org/C195274430","wikidata":"https://www.wikidata.org/wiki/Q1650567","display_name":"Client-side scripting","level":5,"score":0.4253210723400116},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.41898825764656067},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.328945517539978},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24320298433303833},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.172905832529068},{"id":"https://openalex.org/C61096286","wikidata":"https://www.wikidata.org/wiki/Q7978592","display_name":"Web navigation","level":3,"score":0.15246152877807617},{"id":"https://openalex.org/C60644358","wikidata":"https://www.wikidata.org/wiki/Q128570","display_name":"Bioinformatics","level":1,"score":0.07437244057655334},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C127613066","wikidata":"https://www.wikidata.org/wiki/Q557770","display_name":"Web API","level":4,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1315245.1315248","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1315245.1315248","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th ACM conference on Computer and communications security","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.135.8731","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.135.8731","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/~shuochen/papers/ScriptAccenting.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320332434","display_name":"ExxonMobil Research and Engineering Company","ror":"https://ror.org/01xcepn55"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1505465226","https://openalex.org/W1582331515","https://openalex.org/W1977764760","https://openalex.org/W2040210405","https://openalex.org/W2126207747","https://openalex.org/W2133113868","https://openalex.org/W2149684006","https://openalex.org/W2610778765","https://openalex.org/W4299301436","https://openalex.org/W4353004773","https://openalex.org/W6644155904"],"related_works":["https://openalex.org/W4321442002","https://openalex.org/W4389880420","https://openalex.org/W2524526547","https://openalex.org/W4249314447","https://openalex.org/W4309549528","https://openalex.org/W3196199748","https://openalex.org/W587959198","https://openalex.org/W2481146461","https://openalex.org/W2712185701","https://openalex.org/W2625140895"],"abstract_inverted_index":{"Browsers'":[0],"isolation":[1,28,55,102],"mechanisms":[2],"are":[3,34],"critical":[4],"to":[5,73,79,97,108,112,153],"users'":[6],"safety":[7],"and":[8,57,114,146],"privacy":[9],"on":[10,42,134],"the":[11,30,64,76,88,99,147],"web.":[12],"Achieving":[13],"proper":[14],"isolations,":[15],"however,":[16],"is":[17,71,107,150,179],"very":[18],"difficult.":[19],"Historical":[20],"data":[21],"show":[22,165],"that":[23,61,119,140,172,178],"even":[24],"for":[25,182],"seemingly":[26],"simple":[27],"policies,":[29],"current":[31,100],"browser":[32,45,54,68,77],"implementations":[33],"surprisingly":[35],"error-prone.":[36],"Isolation":[37],"bugs":[38,56],"have":[39,126],"been":[40,132],"exploited":[41],"most":[43],"major":[44],"products.":[46],"This":[47],"paper":[48],"presents":[49],"a":[50,93,176],"focused":[51],"study":[52],"of":[53,63,67],"attacks.":[58],"We":[59,169],"found":[60],"because":[62],"intrinsic":[65],"complexity":[66],"components,":[69],"it":[70],"impractical":[72],"exhaustively":[74],"examine":[75],"implementation":[78],"eliminate":[80],"these":[81],"bugs.":[82],"In":[83],"this":[84],"paper,":[85],"we":[86],"propose":[87],"script":[89],"accenting":[90,173],"mechanism":[91,130,149],"as":[92],"light-weight":[94],"transparent":[95,152],"defense":[96],"enhance":[98],"domain":[101],"mechanism.":[103],"The":[104,129,157],"basic":[105],"idea":[106],"introduce":[109],"domain-specific":[110],"\"accents\"":[111],"scripts":[113],"HTML":[115],"object":[116],"names":[117],"so":[118],"two":[120],"frames":[121],"cannot":[122],"communicate/interfere":[123],"if":[124],"they":[125],"different":[127],"accents.":[128],"has":[131],"prototyped":[133],"Internet":[135],"Explorer.":[136],"Our":[137],"evaluations":[138],"showed":[139],"all":[141],"known":[142],"attacks":[143],"were":[144],"defeated,":[145],"proposed":[148],"fully":[151],"existing":[154],"web":[155],"applications.":[156],"measurement":[158],"about":[159],"end-to-end":[160],"browsing":[161],"time":[162],"did":[163],"not":[164],"any":[166],"noticeable":[167],"slowdown.":[168],"also":[170],"argue":[171],"could":[174],"be":[175],"primitive":[177],"general":[180],"enough":[181],"implementing":[183],"other":[184],"domain-isolation":[185],"policies.":[186]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}