{"id":"https://openalex.org/W2107466081","doi":"https://doi.org/10.1145/2508859.2516743","title":"Protecting sensitive web content from client-side vulnerabilities with CRYPTONS","display_name":"Protecting sensitive web content from client-side vulnerabilities with CRYPTONS","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W2107466081","doi":"https://doi.org/10.1145/2508859.2516743","mag":"2107466081"},"language":"en","primary_location":{"id":"doi:10.1145/2508859.2516743","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516743","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005606039","display_name":"Xinshu Dong","orcid":null},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xinshu Dong","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101916439","display_name":"Zhaofeng Chen","orcid":"https://orcid.org/0000-0003-3492-6656"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaofeng Chen","raw_affiliation_strings":["Peking University, Beijing, China","Peking University, Beijing, China#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Peking University, Beijing, China#TAB#","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037287342","display_name":"Hossein Siadati","orcid":"https://orcid.org/0000-0002-5293-8450"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]},{"id":"https://openalex.org/I90965887","display_name":"SUNY Polytechnic Institute","ror":"https://ror.org/000fxgx19","country_code":"US","type":"education","lineage":["https://openalex.org/I90965887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hossein Siadati","raw_affiliation_strings":["Polytechnic Institute of New York University, Brooklyn, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polytechnic Institute of New York University, Brooklyn, USA","institution_ids":["https://openalex.org/I57206974","https://openalex.org/I90965887"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076686201","display_name":"Shruti Tople","orcid":null},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Shruti Tople","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034054081","display_name":"Prateek Saxena","orcid":"https://orcid.org/0000-0002-1875-8675"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Prateek Saxena","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084611756","display_name":"Zhenkai Liang","orcid":"https://orcid.org/0000-0001-7138-5030"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zhenkai Liang","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1311","last_page":"1324"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8401186466217041},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.5325255393981934},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5257568955421448},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.48290348052978516},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.4761607348918915},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.475311815738678},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.4683838188648224},{"id":"https://openalex.org/keywords/client-side","display_name":"Client-side","score":0.44719433784484863},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.434928834438324},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.43227753043174744},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.42404043674468994},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.4110988676548004},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.32273879647254944},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1703093945980072},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.11925479769706726}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8401186466217041},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.5325255393981934},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5257568955421448},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.48290348052978516},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.4761607348918915},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.475311815738678},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.4683838188648224},{"id":"https://openalex.org/C202477664","wikidata":"https://www.wikidata.org/wiki/Q1352449","display_name":"Client-side","level":2,"score":0.44719433784484863},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.434928834438324},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.43227753043174744},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.42404043674468994},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.4110988676548004},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32273879647254944},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1703093945980072},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11925479769706726},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/2508859.2516743","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516743","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},{"id":"pmh:oai:scholarbank.nus.edu.sg:10635/78303","is_oa":false,"landing_page_url":"http://scholarbank.nus.edu.sg/handle/10635/78303","pdf_url":null,"source":{"id":"https://openalex.org/S7407052290","display_name":"National University of Singapore","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Scopus","raw_type":"Conference Paper"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Responsible consumption and production","score":0.550000011920929,"id":"https://metadata.un.org/sdg/12"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W36927914","https://openalex.org/W66333431","https://openalex.org/W74184291","https://openalex.org/W88813478","https://openalex.org/W136211262","https://openalex.org/W169290973","https://openalex.org/W1222699389","https://openalex.org/W1482769911","https://openalex.org/W1515790419","https://openalex.org/W1519988981","https://openalex.org/W1534216444","https://openalex.org/W1536295802","https://openalex.org/W1543857923","https://openalex.org/W1543993937","https://openalex.org/W1549189039","https://openalex.org/W1560720671","https://openalex.org/W1568223756","https://openalex.org/W1598325486","https://openalex.org/W1612881843","https://openalex.org/W1682131187","https://openalex.org/W1693301795","https://openalex.org/W1705596515","https://openalex.org/W1774682829","https://openalex.org/W1809664600","https://openalex.org/W1907897959","https://openalex.org/W1965457815","https://openalex.org/W1969275903","https://openalex.org/W1989161925","https://openalex.org/W2018045700","https://openalex.org/W2030112111","https://openalex.org/W2048702750","https://openalex.org/W2053774863","https://openalex.org/W2065076704","https://openalex.org/W2079029390","https://openalex.org/W2083940415","https://openalex.org/W2089180764","https://openalex.org/W2094568767","https://openalex.org/W2102493164","https://openalex.org/W2107881300","https://openalex.org/W2108255910","https://openalex.org/W2112019167","https://openalex.org/W2123251230","https://openalex.org/W2123582298","https://openalex.org/W2132091063","https://openalex.org/W2139565456","https://openalex.org/W2149517094","https://openalex.org/W2149684006","https://openalex.org/W2161954933","https://openalex.org/W2164532721","https://openalex.org/W2166406630","https://openalex.org/W2238866705","https://openalex.org/W2406017529"],"related_works":["https://openalex.org/W2583381754","https://openalex.org/W2144255176","https://openalex.org/W2222333653","https://openalex.org/W109977192","https://openalex.org/W1970797462","https://openalex.org/W2566747981","https://openalex.org/W4312120139","https://openalex.org/W2342453732","https://openalex.org/W2130765103","https://openalex.org/W2046439525"],"abstract_inverted_index":{"Web":[0],"browsers":[1,89],"isolate":[2,12],"web":[3,31,88],"origins,":[4],"but":[5],"do":[6],"not":[7],"provide":[8],"direct":[9],"abstractions":[10],"to":[11,43,110],"sensitive":[13,30,61],"data":[14,62],"and":[15,40,123],"control":[16,59],"computation":[17],"over":[18,60],"it":[19],"within":[20],"the":[21,38,70,84,100,105],"same":[22],"origin.":[23],"As":[24],"a":[25,51,76],"result,":[26],"guaranteeing":[27],"security":[28],"of":[29,72,86,116],"content":[32],"requires":[33],"trusting":[34],"all":[35],"code":[36],"in":[37],"browser":[39],"client-side":[41],"applications":[42,113],"be":[44],"vulnerability-free.":[45],"In":[46],"this":[47],"paper,":[48],"we":[49,74],"propose":[50],"new":[52],"abstraction,":[53],"called":[54,79],"Crypton,":[55],"which":[56,81],"supports":[57],"intra-origin":[58],"throughout":[63],"its":[64],"life":[65],"cycle.":[66],"To":[67],"securely":[68],"enforce":[69],"semantics":[71],"Cryptons,":[73],"develop":[75],"standalone":[77],"component":[78],"Crypton-Kernel,":[80],"extensively":[82],"leverages":[83],"functionality":[85],"existing":[87],"without":[90],"relying":[91],"on":[92],"their":[93],"large":[94],"TCB.":[95],"Our":[96],"evaluation":[97],"demonstrates":[98],"that":[99],"Crypton":[101],"abstraction":[102],"supported":[103],"by":[104],"Crypton-Kernel":[106],"is":[107],"widely":[108],"applicable":[109],"popular":[111],"real-world":[112],"with":[114,128],"millions":[115],"users,":[117],"including":[118],"webmail,":[119],"chat,":[120],"blog":[121],"applications,":[122],"Alexa":[124],"Top":[125],"50":[126],"websites,":[127],"low":[129],"performance":[130],"overhead.":[131]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}