{"id":"https://openalex.org/W1976327390","doi":"https://doi.org/10.1145/2508859.2516685","title":"Polyglots","display_name":"Polyglots","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W1976327390","doi":"https://doi.org/10.1145/2508859.2516685","mag":"1976327390"},"language":"en","primary_location":{"id":"doi:10.1145/2508859.2516685","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516685","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032215643","display_name":"Jonas Magazinius","orcid":null},"institutions":[{"id":"https://openalex.org/I66862912","display_name":"Chalmers University of Technology","ror":"https://ror.org/040wg7k59","country_code":"SE","type":"education","lineage":["https://openalex.org/I66862912"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Jonas Magazinius","raw_affiliation_strings":["Chalmers University of Technology, Gothenburg, Sweden","Chalmers Univ., of Technol., Gothenburg, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chalmers University of Technology, Gothenburg, Sweden","institution_ids":["https://openalex.org/I66862912"]},{"raw_affiliation_string":"Chalmers Univ., of Technol., Gothenburg, Sweden","institution_ids":["https://openalex.org/I66862912"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072987973","display_name":"Billy Rios","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Billy K. Rios","raw_affiliation_strings":["Cylance, Inc., Irvine, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cylance, Inc., Irvine, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070340953","display_name":"Andrei Sabelfeld","orcid":null},"institutions":[{"id":"https://openalex.org/I66862912","display_name":"Chalmers University of Technology","ror":"https://ror.org/040wg7k59","country_code":"SE","type":"education","lineage":["https://openalex.org/I66862912"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Andrei Sabelfeld","raw_affiliation_strings":["Chalmers University of Technology, Gothenburg, Sweden","Chalmers Univ., of Technol., Gothenburg, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chalmers University of Technology, Gothenburg, Sweden","institution_ids":["https://openalex.org/I66862912"]},{"raw_affiliation_string":"Chalmers Univ., of Technol., Gothenburg, Sweden","institution_ids":["https://openalex.org/I66862912"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5199,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.82055105,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"753","last_page":"764"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/polyglot","display_name":"Polyglot","score":0.9381375312805176},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.829056978225708},{"id":"https://openalex.org/keywords/web-content","display_name":"Web content","score":0.7002564668655396},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5283530354499817},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.5221631526947021},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.518550455570221},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5092946290969849},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.483949214220047},{"id":"https://openalex.org/keywords/syntax","display_name":"Syntax","score":0.4679716229438782},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4669194221496582},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.46253278851509094},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.4416760802268982},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.434114545583725},{"id":"https://openalex.org/keywords/web-api","display_name":"Web API","score":0.41603371500968933},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.36382216215133667},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.3280014097690582},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1343567669391632},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.11073249578475952},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.10117065906524658}],"concepts":[{"id":"https://openalex.org/C2780239667","wikidata":"https://www.wikidata.org/wiki/Q2102850","display_name":"Polyglot","level":2,"score":0.9381375312805176},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.829056978225708},{"id":"https://openalex.org/C2776324614","wikidata":"https://www.wikidata.org/wiki/Q3948731","display_name":"Web content","level":3,"score":0.7002564668655396},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5283530354499817},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.5221631526947021},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.518550455570221},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5092946290969849},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.483949214220047},{"id":"https://openalex.org/C60048249","wikidata":"https://www.wikidata.org/wiki/Q37437","display_name":"Syntax","level":2,"score":0.4679716229438782},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4669194221496582},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.46253278851509094},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.4416760802268982},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.434114545583725},{"id":"https://openalex.org/C127613066","wikidata":"https://www.wikidata.org/wiki/Q557770","display_name":"Web API","level":4,"score":0.41603371500968933},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.36382216215133667},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.3280014097690582},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1343567669391632},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.11073249578475952},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.10117065906524658}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/2508859.2516685","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516685","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},{"id":"pmh:oai:research.chalmers.se:189673","is_oa":false,"landing_page_url":"https://research.chalmers.se/en/publication/189673","pdf_url":null,"source":{"id":"https://openalex.org/S4306402469","display_name":"Chalmers Research (Chalmers University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66862912","host_organization_name":"Chalmers University of Technology","host_organization_lineage":["https://openalex.org/I66862912"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.699999988079071,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W852643139","https://openalex.org/W1557808377","https://openalex.org/W2043520730","https://openalex.org/W2049869570","https://openalex.org/W2110986027","https://openalex.org/W2148660501","https://openalex.org/W2265465341","https://openalex.org/W3155028786"],"related_works":["https://openalex.org/W2548409577","https://openalex.org/W1531015913","https://openalex.org/W3129846904","https://openalex.org/W3180404666","https://openalex.org/W2407701912","https://openalex.org/W1484631816","https://openalex.org/W2167752994","https://openalex.org/W2907218437","https://openalex.org/W2181766705","https://openalex.org/W3157804828"],"abstract_inverted_index":{"In":[0],"a":[1,42,51,68,78,155],"heterogeneous":[2],"system":[3],"like":[4],"the":[5,22,26,29,38,65,82,93,102,120,167,185,242],"web,":[6],"information":[7],"is":[8,20,50,54],"exchanged":[9],"between":[10,28],"components":[11],"in":[12,56,81,170,184,228,231],"versatile":[13],"formats.":[14],"A":[15,48],"new":[16,69],"breed":[17],"of":[18,41,45,64,71,133,158],"attacks":[19,100,143],"on":[21,37,101,182,225],"rise":[23],"that":[24,53,98,118,136],"exploit":[25],"mismatch":[27],"expected":[30],"and":[31,85,129,149,161,174,180,230],"provided":[32],"content.":[33,141],"This":[34],"paper":[35,113],"focuses":[36],"root":[39],"cause":[40],"large":[43],"class":[44],"attacks:":[46],"polyglots.":[47],"polyglot":[49],"program":[52],"valid":[55],"multiple":[57,62,127],"programming":[58],"languages.":[59],"Polyglots":[60],"allow":[61],"interpretation":[63],"content,":[66],"providing":[67],"space":[70],"attack":[72,116],"vectors.":[73],"We":[74,96,153,165,191],"characterize":[75],"what":[76],"constitutes":[77],"dangerous":[79,88],"format":[80],"web":[83,103,189,194],"setting":[84],"identify":[86,192],"particularly":[87],"formats,":[89],"with":[90],"PDF":[91,175,236],"as":[92,139],"prime":[94],"example.":[95],"demonstrate":[97],"polyglot-based":[99,178],"open":[104],"up":[105],"for":[106,177,222],"insecure":[107],"communication":[108],"across":[109,126],"Internet":[110],"origins.":[111],"The":[112,142],"presents":[114],"novel":[115],"vectors":[117],"infiltrate":[119],"trusted":[121],"origin":[122],"by":[123,130],"syntax":[124,200],"injection":[125,160,201],"languages":[128],"content":[131,162,172,217,232],"smuggling":[132,163,218],"malicious":[134],"payload":[135],"appears":[137],"formatted":[138],"benign":[140],"lead":[144],"to":[145,196,199,213,216,240],"both":[146],"cross-domain":[147],"leakage":[148],"cross-site":[150],"request":[151],"forgery.":[152],"perform":[154],"systematic":[156],"study":[157],"PDF-based":[159],"attacks.":[164,202,219,243],"evaluate":[166],"current":[168],"practice":[169],"client/server":[171],"filtering":[173],"readers":[176],"attacks,":[179],"report":[181],"vulnerabilities":[183],"top":[186],"100":[187],"Alexa":[188],"sites.":[190],"five":[193],"sites":[195],"be":[197,214],"vulnerable":[198],"Further,":[203],"we":[204],"have":[205],"found":[206],"two":[207],"major":[208],"enterprise":[209],"cloud":[210],"storage":[211],"services":[212],"susceptible":[215],"Our":[220],"recommendations":[221],"protective":[223],"measures":[224],"server":[226],"side,":[227],"browsers,":[229],"interpreters":[233],"(in":[234],"particular,":[235],"readers)":[237],"show":[238],"how":[239],"mitigate":[241]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":2}],"updated_date":"2026-08-27T14:10:00.468798","created_date":"2016-06-24T00:00:00"}