{"id":"https://openalex.org/W2015736939","doi":"https://doi.org/10.1145/2508859.2512516","title":"POSTER: trend of online flash XSS vulnerabilities","display_name":"POSTER: trend of online flash XSS vulnerabilities","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W2015736939","doi":"https://doi.org/10.1145/2508859.2512516","mag":"2015736939"},"language":"en","primary_location":{"id":"doi:10.1145/2508859.2512516","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2512516","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004834139","display_name":"Qixu Liu","orcid":"https://orcid.org/0000-0003-0895-9585"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qixu Liu","raw_affiliation_strings":["University of Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China,","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100401884","display_name":"Yuqing Zhang","orcid":"https://orcid.org/0000-0001-8306-7195"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuqing Zhang","raw_affiliation_strings":["University of Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China,","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044569542","display_name":"Huan Yang","orcid":"https://orcid.org/0000-0002-7145-8495"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huan Yang","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, Xidian University, Xian, China","[State key Laboratory of Integrated Services Networks, Xidian University, Xian, China]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, Xidian University, Xian, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"[State key Laboratory of Integrated Services Networks, Xidian University, Xian, China]","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12452694,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1421","last_page":"1424"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.9886468648910522},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8519578576087952},{"id":"https://openalex.org/keywords/actionscript","display_name":"ActionScript","score":0.6719643473625183},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.5987319946289062},{"id":"https://openalex.org/keywords/flash","display_name":"Flash (photography)","score":0.566794216632843},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.5413650274276733},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5302379131317139},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4536116421222687},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.44382452964782715},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3930118680000305},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.16886389255523682},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11806315183639526},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.10725495219230652}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.9886468648910522},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8519578576087952},{"id":"https://openalex.org/C111471085","wikidata":"https://www.wikidata.org/wiki/Q234657","display_name":"ActionScript","level":3,"score":0.6719643473625183},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.5987319946289062},{"id":"https://openalex.org/C2777526259","wikidata":"https://www.wikidata.org/wiki/Q221836","display_name":"Flash (photography)","level":2,"score":0.566794216632843},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5413650274276733},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5302379131317139},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4536116421222687},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44382452964782715},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3930118680000305},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.16886389255523682},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11806315183639526},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.10725495219230652},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2508859.2512516","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2512516","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W2014742088","https://openalex.org/W2077204203","https://openalex.org/W2098473270"],"related_works":["https://openalex.org/W2483547171","https://openalex.org/W2390076157","https://openalex.org/W957207403","https://openalex.org/W2481664321","https://openalex.org/W2375439417","https://openalex.org/W205868524","https://openalex.org/W2150889667","https://openalex.org/W2412453789","https://openalex.org/W204192722","https://openalex.org/W2360497718"],"abstract_inverted_index":{"Flash":[0,20,56,68,119,139,157],"objects":[1,21,140],"are":[2,22,31,79,131],"widely":[3],"embedded":[4],"in":[5,54,70,109,121,169],"web":[6,71,130],"pages,":[7],"supporting":[8],"Rich":[9],"Internet":[10],"Applications":[11],"using":[12],"ActionScript.":[13],"However,":[14],"according":[15],"to":[16,25,81,133],"our":[17],"survey,":[18],"many":[19],"seriously":[23],"exposed":[24],"Cross-site":[26],"Scripting":[27],"vulnerabilities":[28],"as":[29],"they":[30,78],"usually":[32],"coded":[33],"without":[34],"proper":[35],"sanitization":[36],"of":[37,101,123,136,146,156,166],"their":[38,147],"inputs.":[39],"This":[40],"becomes":[41],"a":[42,153],"potential":[43],"danger":[44],"for":[45,65],"cyber":[46],"users.":[47],"In":[48],"this":[49],"paper,":[50],"we":[51,151],"analyze":[52],"XSS":[53,63,148],"online":[55],"and":[57,73,90,144],"present":[58],"an":[59],"engine":[60],"FXD":[61,102],"(Flash":[62],"Detector)":[64],"automatically":[66],"scrambling":[67],"files":[69],"pages":[72],"checking":[74],"whether":[75],"or":[76],"not":[77],"vulnerable":[80,85,132,138],"XSS.":[82,134],"We":[83],"call":[84],"ActionScript":[86],"functions":[87,168],"\"key":[88],"functions\"":[89],"divide":[91],"them":[92],"into":[93],"four":[94],"categories":[95],"by":[96,106,164],"its":[97],"functionality.":[98],"The":[99],"usability":[100],"is":[103,161],"further":[104],"evaluated":[105],"disposing":[107],"it":[108,160],"real-world":[110],"websites.":[111],"Our":[112],"results":[113],"reveal":[114],"that":[115],"at":[116],"least":[117],"48":[118],"applications":[120],"18%":[122],"Alexa":[124],"top":[125],"100":[126],"sites":[127],"on":[128],"the":[129],"Each":[135],"these":[137],"has":[141],"been":[142],"verified":[143],"confirmed":[145],"flaws.":[149],"Finally,":[150],"discuss":[152],"new":[154],"trend":[155],"XSS,":[158],"nowadays":[159],"mainly":[162],"caused":[163],"combination":[165],"key":[167],"different":[170],"categories.":[171]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}