{"id":"https://openalex.org/W2119249378","doi":"https://doi.org/10.1145/2508859.2516727","title":"Unauthorized origin crossing on mobile platforms","display_name":"Unauthorized origin crossing on mobile platforms","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W2119249378","doi":"https://doi.org/10.1145/2508859.2516727","mag":"2119249378"},"language":"en","primary_location":{"id":"doi:10.1145/2508859.2516727","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516727","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100431257","display_name":"Rui Wang","orcid":"https://orcid.org/0000-0002-4792-1945"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rui Wang","raw_affiliation_strings":["Microsoft Research, Redmond, WA, USA","[Microsoft Research,Redmond,WA,USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research,Redmond,WA,USA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036446600","display_name":"Luyi Xing","orcid":"https://orcid.org/0000-0002-1036-1163"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Luyi Xing","raw_affiliation_strings":["Indiana University, Bloomington, IN, USA","Indiana University,Bloomington, IN,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]},{"raw_affiliation_string":"Indiana University,Bloomington, IN,USA","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100333239","display_name":"Xiaofeng Wang","orcid":"https://orcid.org/0000-0002-3583-369X"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"XiaoFeng Wang","raw_affiliation_strings":["Indiana University, Bloomington, IN, USA","Indiana University,Bloomington, IN,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]},{"raw_affiliation_string":"Indiana University,Bloomington, IN,USA","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100366890","display_name":"Shuo Chen","orcid":"https://orcid.org/0000-0003-3893-715X"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shuo Chen","raw_affiliation_strings":["Microsoft Research, Redmond, WA, USA","[Microsoft Research,Redmond,WA,USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research,Redmond,WA,USA]","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":90,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"635","last_page":"646"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6793889403343201},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.6473861932754517},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6470641493797302},{"id":"https://openalex.org/keywords/mobile-web","display_name":"Mobile Web","score":0.5330482721328735},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.5058343410491943},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5029625296592712},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.4942474663257599},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4831371009349823},{"id":"https://openalex.org/keywords/mobile-computing","display_name":"Mobile computing","score":0.4207202196121216},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3973662257194519},{"id":"https://openalex.org/keywords/mobile-technology","display_name":"Mobile technology","score":0.30713027715682983},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1349315643310547},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08998149633407593}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6793889403343201},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.6473861932754517},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6470641493797302},{"id":"https://openalex.org/C516764902","wikidata":"https://www.wikidata.org/wiki/Q1043805","display_name":"Mobile Web","level":4,"score":0.5330482721328735},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.5058343410491943},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5029625296592712},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.4942474663257599},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4831371009349823},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.4207202196121216},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3973662257194519},{"id":"https://openalex.org/C60952562","wikidata":"https://www.wikidata.org/wiki/Q6887246","display_name":"Mobile technology","level":3,"score":0.30713027715682983},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1349315643310547},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08998149633407593}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2508859.2516727","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516727","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W77717277","https://openalex.org/W187285683","https://openalex.org/W197713628","https://openalex.org/W1486263771","https://openalex.org/W1555215938","https://openalex.org/W1680232729","https://openalex.org/W1912565424","https://openalex.org/W1963971515","https://openalex.org/W1989734217","https://openalex.org/W1994588724","https://openalex.org/W2056073317","https://openalex.org/W2072978486","https://openalex.org/W2081867537","https://openalex.org/W2150587160","https://openalex.org/W2153497135","https://openalex.org/W2167661907","https://openalex.org/W2255369088","https://openalex.org/W2397986719","https://openalex.org/W2398484989","https://openalex.org/W2398686783","https://openalex.org/W2399034518","https://openalex.org/W2400528202"],"related_works":["https://openalex.org/W2047117180","https://openalex.org/W2595312624","https://openalex.org/W2154498492","https://openalex.org/W2490036956","https://openalex.org/W3193585836","https://openalex.org/W2736726988","https://openalex.org/W2170180570","https://openalex.org/W2140383224","https://openalex.org/W2363229073","https://openalex.org/W2997885423"],"abstract_inverted_index":{"With":[0],"the":[1,23,32,35,53,66,81,92,104,122,150,244,247,256,270,273],"progress":[2],"in":[3,262],"mobile":[4,15,42,72,98,164,178,190,226,248],"computing,":[5],"web":[6,19,36,75,125],"services":[7,126],"are":[8,161,169],"increasingly":[9],"delivered":[10],"to":[11,30,51,80,137,152,163,204,275],"their":[12,132,167,211],"users":[13],"through":[14],"apps,":[16,57],"instead":[17],"of":[18,146,156,258],"browsers.":[20],"However,":[21],"unlike":[22],"browser,":[24],"which":[25],"enforces":[26],"origin-based":[27,147,220],"security":[28,49,240],"policies":[29,245],"mediate":[31],"interactions":[33],"between":[34,56,62],"content":[37],"from":[38,83],"different":[39],"sources,":[40],"today's":[41],"OSes":[43],"do":[44],"not":[45],"have":[46],"a":[47,69,71,84,153,189],"comparable":[48],"mechanism":[50],"control":[52],"cross-origin":[54,99,106,157],"communications":[55],"as":[58,60],"well":[59],"those":[61,135],"an":[63,184,219],"app":[64],"and":[65,110,115,119,131,166,181,195,242,269],"web.":[67],"As":[68],"result,":[70],"user's":[73,191],"sensitive":[74],"resources":[76],"could":[77],"be":[78],"exposed":[79],"harms":[82],"malicious":[85],"origin.":[86],"In":[87],"this":[88,97,215],"paper,":[89],"we":[90,217],"report":[91,201],"first":[93],"systematic":[94],"study":[95,102],"on":[96,108,246,251],"risk.":[100],"Our":[101,253],"inspects":[103],"main":[105],"channels":[107,136,249],"Android":[109],"iOS,":[111],"including":[112],"intent,":[113],"scheme":[114],"web-accessing":[116],"utility":[117],"classes,":[118],"further":[120],"analyzes":[121],"ways":[123],"popular":[124],"(e.g.,":[127],"Facebook,":[128],"Dropbox,":[129],"etc.)":[130],"apps":[133],"utilize":[134],"serve":[138],"other":[139],"apps.":[140],"The":[141],"research":[142],"shows":[143],"that":[144],"lack":[145],"protection":[148,221],"opens":[149],"door":[151],"wide":[154],"spectrum":[155],"attacks.":[158],"These":[159],"attacks":[160],"unique":[162],"platforms,":[165],"consequences":[168],"serious:":[170],"for":[171,177,225,272],"example,":[172],"using":[173],"carefully":[174],"designed":[175,218],"techniques":[176],"cross-site":[179],"scripting":[180],"request":[182],"forgery,":[183],"unauthorized":[185,264],"party":[186],"can":[187],"obtain":[188],"Facebook/Dropbox":[192],"authentication":[193],"credentials":[194],"record":[196],"her":[197],"text":[198],"input.":[199],"We":[200],"our":[202,259],"findings":[203],"related":[205],"software":[206],"vendors,":[207],"who":[208],"all":[209],"acknowledged":[210],"importance.":[212],"To":[213],"address":[214],"threat,":[216],"mechanism,":[222],"called":[223],"Morbs,":[224],"OSes.":[227],"Morbs":[228],"labels":[229],"every":[230],"message":[231],"with":[232],"its":[233,267],"origin":[234,265],"information,":[235],"lets":[236],"developers":[237,274],"easily":[238],"specify":[239],"policies,":[241],"enforce":[243],"based":[250],"origins.":[252],"evaluation":[254],"demonstrates":[255],"effectiveness":[257],"new":[260],"technique":[261],"defeating":[263],"crossing,":[266],"efficiency":[268],"convenience":[271],"use":[276],"such":[277],"protection.":[278]},"counts_by_year":[{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":12},{"year":2017,"cited_by_count":13},{"year":2016,"cited_by_count":11},{"year":2015,"cited_by_count":20},{"year":2014,"cited_by_count":14}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}