{"id":"https://openalex.org/W2041188073","doi":"https://doi.org/10.1145/2597173","title":"Off-Path TCP Injection Attacks","display_name":"Off-Path TCP Injection Attacks","publication_year":2014,"publication_date":"2014-04-01","ids":{"openalex":"https://openalex.org/W2041188073","doi":"https://doi.org/10.1145/2597173","mag":"2041188073"},"language":"en","primary_location":{"id":"doi:10.1145/2597173","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2597173","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056985040","display_name":"Yossi Gilad","orcid":"https://orcid.org/0000-0003-3475-8322"},"institutions":[{"id":"https://openalex.org/I13955877","display_name":"Bar-Ilan University","ror":"https://ror.org/03kgsv495","country_code":"IL","type":"education","lineage":["https://openalex.org/I13955877"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Yossi Gilad","raw_affiliation_strings":["Bar-Ilan University","Bar Ilan University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bar-Ilan University","institution_ids":["https://openalex.org/I13955877"]},{"raw_affiliation_string":"Bar Ilan University ,","institution_ids":["https://openalex.org/I13955877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004964902","display_name":"Amir Herzberg","orcid":"https://orcid.org/0000-0001-5586-5261"},"institutions":[{"id":"https://openalex.org/I13955877","display_name":"Bar-Ilan University","ror":"https://ror.org/03kgsv495","country_code":"IL","type":"education","lineage":["https://openalex.org/I13955877"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Amir Herzberg","raw_affiliation_strings":["Bar-Ilan University","Bar Ilan University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bar-Ilan University","institution_ids":["https://openalex.org/I13955877"]},{"raw_affiliation_string":"Bar Ilan University ,","institution_ids":["https://openalex.org/I13955877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I13955877"],"apc_list":null,"apc_paid":null,"fwci":2.4257,"has_fulltext":false,"cited_by_count":34,"citation_normalized_percentile":{"value":0.91077565,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"16","issue":"4","first_page":"1","last_page":"32"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8770204782485962},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.5753734111785889},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5742007493972778},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5040637254714966},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.48974609375},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.466859370470047},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.46029433608055115},{"id":"https://openalex.org/keywords/tcp-hole-punching","display_name":"TCP hole punching","score":0.45793581008911133},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3998672664165497},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3856249749660492},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.3166176676750183},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.23676002025604248},{"id":"https://openalex.org/keywords/zeta-tcp","display_name":"Zeta-TCP","score":0.21403390169143677},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.192804753780365},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.17300298810005188},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.14771777391433716},{"id":"https://openalex.org/keywords/transmission-control-protocol","display_name":"Transmission Control Protocol","score":0.12507396936416626}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8770204782485962},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.5753734111785889},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5742007493972778},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5040637254714966},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.48974609375},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.466859370470047},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.46029433608055115},{"id":"https://openalex.org/C190362163","wikidata":"https://www.wikidata.org/wiki/Q7669759","display_name":"TCP hole punching","level":5,"score":0.45793581008911133},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3998672664165497},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3856249749660492},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.3166176676750183},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.23676002025604248},{"id":"https://openalex.org/C30305156","wikidata":"https://www.wikidata.org/wiki/Q8069697","display_name":"Zeta-TCP","level":4,"score":0.21403390169143677},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.192804753780365},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.17300298810005188},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.14771777391433716},{"id":"https://openalex.org/C33588617","wikidata":"https://www.wikidata.org/wiki/Q8803","display_name":"Transmission Control Protocol","level":3,"score":0.12507396936416626}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2597173","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2597173","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7900000214576721}],"awards":[{"id":"https://openalex.org/G8300455301","display_name":null,"funder_award_id":"1354/11","funder_id":"https://openalex.org/F4320322252","funder_display_name":"Israel Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320322252","display_name":"Israel Science Foundation","ror":"https://ror.org/04sazxf24"},{"id":"https://openalex.org/F4320323706","display_name":"Ministry of Science and Technology, Israel","ror":"https://ror.org/02heb2n75"},{"id":"https://openalex.org/F4320337179","display_name":"Check Point Institute for Information Security, Tel Aviv University","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W74730889","https://openalex.org/W89759755","https://openalex.org/W91341907","https://openalex.org/W337355046","https://openalex.org/W1519687682","https://openalex.org/W1538104277","https://openalex.org/W1540641082","https://openalex.org/W1590544288","https://openalex.org/W1615970822","https://openalex.org/W1677315679","https://openalex.org/W1779735989","https://openalex.org/W1867219652","https://openalex.org/W1966143594","https://openalex.org/W1974977720","https://openalex.org/W1976066853","https://openalex.org/W2026864625","https://openalex.org/W2070670160","https://openalex.org/W2072978486","https://openalex.org/W2081464537","https://openalex.org/W2106243315","https://openalex.org/W2106381449","https://openalex.org/W2117175761","https://openalex.org/W2133467782","https://openalex.org/W2139665594","https://openalex.org/W2145327498","https://openalex.org/W2147491888","https://openalex.org/W2150326939","https://openalex.org/W2159256070","https://openalex.org/W2168563136","https://openalex.org/W2170334586","https://openalex.org/W2255369088","https://openalex.org/W2287831134","https://openalex.org/W2301803821","https://openalex.org/W2336650211","https://openalex.org/W2340940575","https://openalex.org/W2505653653","https://openalex.org/W2912464732","https://openalex.org/W4251260016","https://openalex.org/W4285719527","https://openalex.org/W6906355099"],"related_works":["https://openalex.org/W4366502726","https://openalex.org/W2023038964","https://openalex.org/W2075358766","https://openalex.org/W2981036578","https://openalex.org/W4289527657","https://openalex.org/W2578193553","https://openalex.org/W1985998952","https://openalex.org/W2376164011","https://openalex.org/W1594341569","https://openalex.org/W1511683926"],"abstract_inverted_index":{"We":[0,145],"present":[1],"practical":[2,150],"off-path":[3],"TCP":[4,63,111],"injection":[5,64],"attacks":[6,17,81,105],"for":[7,36],"connections":[8,137],"between":[9],"current,":[10],"nonbuggy":[11],"browsers":[12,134],"and":[13,29,56,112,115,152],"Web":[14,27,94,141],"servers.":[15],"The":[16],"allow":[18],"Web-cache":[19],"poisoning":[20],"with":[21,130,138,149],"malicious":[22,93],"objects":[23,32],"such":[24],"as":[25],"spoofed":[26],"pages":[28],"scripts;":[30],"these":[31],"can":[33],"be":[34],"cached":[35],"a":[37,84,92],"long":[38],"period":[39],"of":[40,45,109,117,127,133],"time,":[41],"exposing":[42],"any":[43,102],"user":[44,89],"that":[46,87,136],"cache":[47],"to":[48,61],"cross-site":[49,52],"scripting":[50],",":[51,55],"request":[53],"forgery":[54],"phishing":[57],"attacks.":[58,157],"In":[59],"contrast":[60],"previous":[62],"attacks,":[65],"we":[66],"do":[67],"not":[68,98],"require":[69],"MitM":[70],"capabilities":[71],"or":[72,100],"malware":[73],"running":[74],"on":[75,83],"the":[76,88,110],"client":[77],"machine.":[78],"Instead,":[79],"our":[80,128,156],"rely":[82],"weaker":[85],"assumption,":[86],"only":[90],"enters":[91],"site,":[95],"but":[96],"does":[97],"download":[99],"install":[101],"application.":[103],"Our":[104],"exploit":[106],"subtle":[107],"details":[108],"HTTP":[113],"specifications,":[114],"features":[116],"legitimate":[118],"(and":[119],"very":[120],"common)":[121],"browser":[122],"implementations.":[123],"An":[124],"empirical":[125],"evaluation":[126],"techniques":[129],"current":[131],"versions":[132],"shows":[135],"most":[139],"popular":[140],"sites":[142],"are":[143],"vulnerable.":[144],"conclude":[146],"this":[147],"work":[148],"client-":[151],"server-end":[153],"defenses":[154],"against":[155]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}