{"id":"https://openalex.org/W2055098165","doi":"https://doi.org/10.1145/1920261.1920289","title":"FIRM","display_name":"FIRM","publication_year":2010,"publication_date":"2010-12-06","ids":{"openalex":"https://openalex.org/W2055098165","doi":"https://doi.org/10.1145/1920261.1920289","mag":"2055098165"},"language":"en","primary_location":{"id":"doi:10.1145/1920261.1920289","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1920261.1920289","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100452308","display_name":"Zhou Li","orcid":"https://orcid.org/0000-0002-9401-1012"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhou Li","raw_affiliation_strings":["Indiana University, Bloomington","Indiana University. Bloomington"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University, Bloomington","institution_ids":["https://openalex.org/I4210119109"]},{"raw_affiliation_string":"Indiana University. Bloomington","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100333239","display_name":"Xiaofeng Wang","orcid":"https://orcid.org/0000-0002-3583-369X"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"XiaoFeng Wang","raw_affiliation_strings":["Indiana University, Bloomington","Indiana University. Bloomington"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University, Bloomington","institution_ids":["https://openalex.org/I4210119109"]},{"raw_affiliation_string":"Indiana University. Bloomington","institution_ids":["https://openalex.org/I4210119109"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210119109"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"181","last_page":"190"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7959743738174438},{"id":"https://openalex.org/keywords/flash","display_name":"Flash (photography)","score":0.7819618582725525},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5517362356185913},{"id":"https://openalex.org/keywords/adobe","display_name":"Adobe","score":0.48446202278137207},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.4596237242221832},{"id":"https://openalex.org/keywords/web-content","display_name":"Web content","score":0.45772016048431396},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.44891342520713806},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3815881311893463},{"id":"https://openalex.org/keywords/multimedia","display_name":"Multimedia","score":0.25300246477127075},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.20690295100212097}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7959743738174438},{"id":"https://openalex.org/C2777526259","wikidata":"https://www.wikidata.org/wiki/Q221836","display_name":"Flash (photography)","level":2,"score":0.7819618582725525},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5517362356185913},{"id":"https://openalex.org/C2777261232","wikidata":"https://www.wikidata.org/wiki/Q183496","display_name":"Adobe","level":2,"score":0.48446202278137207},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.4596237242221832},{"id":"https://openalex.org/C2776324614","wikidata":"https://www.wikidata.org/wiki/Q3948731","display_name":"Web content","level":3,"score":0.45772016048431396},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.44891342520713806},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3815881311893463},{"id":"https://openalex.org/C49774154","wikidata":"https://www.wikidata.org/wiki/Q131765","display_name":"Multimedia","level":1,"score":0.25300246477127075},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.20690295100212097},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1920261.1920289","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1920261.1920289","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5470685120","display_name":null,"funder_award_id":"CNS-0716292CNS-1017782","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"}],"funders":[{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1487950523","https://openalex.org/W1492437080","https://openalex.org/W1520961854","https://openalex.org/W1582331515","https://openalex.org/W1587071109","https://openalex.org/W1989161925","https://openalex.org/W2003189607","https://openalex.org/W2101699859","https://openalex.org/W2109219878","https://openalex.org/W2121194882","https://openalex.org/W2122049982","https://openalex.org/W2122847456","https://openalex.org/W2132733485","https://openalex.org/W2138858469","https://openalex.org/W2141704790","https://openalex.org/W2141988808","https://openalex.org/W2152734828","https://openalex.org/W2159079348","https://openalex.org/W2162316255","https://openalex.org/W2168563136","https://openalex.org/W2170920217","https://openalex.org/W2914982603","https://openalex.org/W4240166417","https://openalex.org/W4242289848","https://openalex.org/W6631165357"],"related_works":["https://openalex.org/W2619948053","https://openalex.org/W2604469196","https://openalex.org/W83623555","https://openalex.org/W2301180626","https://openalex.org/W2105057309","https://openalex.org/W2522371906","https://openalex.org/W4399454558","https://openalex.org/W3159434392","https://openalex.org/W4255475599","https://openalex.org/W2544674189"],"abstract_inverted_index":{"The":[0,127],"wide":[1],"use":[2],"of":[3,74,97,160,166],"Flash":[4,12,26,32,56,101,125,143,187],"technologies":[5],"makes":[6],"the":[7,25,51,98,121,131,134,146,151,158,164],"security":[8],"risks":[9,19],"posed":[10],"by":[11,24,150],"content":[13,102,135],"an":[14,115],"increasingly":[15],"serious":[16],"issue.":[17],"Such":[18],"cannot":[20],"be":[21,68,171],"effectively":[22,129,156,192],"addressed":[23],"player,":[27],"which":[28],"either":[29],"completely":[30,86],"blocks":[31],"content's":[33],"access":[34],"to":[35,44,49,64,67,70,88,177],"web":[36,75,122,152,184],"resources":[37],"or":[38],"grants":[39],"it":[40,65,84],"unconstrained":[41],"access.":[42],"Efforts":[43],"mitigate":[45],"this":[46,80],"threat":[47],"have":[48],"face":[50],"practical":[52],"challenges":[53],"that":[54,83,113,190],"Adobe":[55],"player":[57],"is":[58,85,109],"closed":[59],"source,":[60],"and":[61,103,136,139,163,186,197],"any":[62,175],"changes":[63,176],"need":[66],"distributed":[69],"a":[71,111],"large":[72],"number":[73],"clients.":[76],"We":[77],"demonstrate":[78],"in":[79],"paper,":[81],"however,":[82],"feasible":[87],"avoid":[89],"these":[90],"hurdles":[91],"while":[92],"still":[93],"achieving":[94],"fine-grained":[95],"control":[96],"interactions":[99,132],"between":[100,133,141],"its":[104,161],"hosting":[105,124],"page.":[106],"Our":[107,179],"solution":[108],"FIRM,":[110],"system":[112],"embeds":[114],"inline":[116],"reference":[117],"monitor":[118],"(IRM)":[119],"within":[120],"page":[123],"content.":[126],"IRM":[128,162],"mediates":[130],"DOM":[137],"objects,":[138],"those":[140],"different":[142],"applications,":[144],"using":[145],"capability":[147,167],"tokens":[148],"assigned":[149],"designer.":[153],"FIRM":[154,191],"can":[155,170],"protect":[157],"integrity":[159],"confidentiality":[165],"tokens.":[168],"It":[169],"deployed":[172],"without":[173],"making":[174],"browsers.":[178],"evaluation":[180],"based":[181],"upon":[182],"real-world":[183],"applications":[185,188],"demonstrates":[189],"protects":[193],"valuable":[194],"user":[195],"information":[196],"incurs":[198],"small":[199],"overhead.":[200]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2014,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2016-06-24T00:00:00"}