{"id":"https://openalex.org/W2055611117","doi":"https://doi.org/10.1145/2695664.2695946","title":"Security assessment of clickjacking risks in web applications","display_name":"Security assessment of clickjacking risks in web applications","publication_year":2015,"publication_date":"2015-04-13","ids":{"openalex":"https://openalex.org/W2055611117","doi":"https://doi.org/10.1145/2695664.2695946","mag":"2055611117"},"language":"en","primary_location":{"id":"doi:10.1145/2695664.2695946","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2695664.2695946","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052820694","display_name":"Hossain Shahriar","orcid":"https://orcid.org/0000-0003-1021-7986"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hossain Shahriar","raw_affiliation_strings":["Kennesaw State University, Kennesaw, GA","Kennesaw State University, Kennesaw, Ga"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University, Kennesaw, GA","institution_ids":["https://openalex.org/I172980758"]},{"raw_affiliation_string":"Kennesaw State University, Kennesaw, Ga","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033589500","display_name":"Hisham M. Haddad","orcid":null},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hisham Haddad","raw_affiliation_strings":["Kennesaw State University, Kennesaw, GA","Kennesaw State University, Kennesaw, Ga"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University, Kennesaw, GA","institution_ids":["https://openalex.org/I172980758"]},{"raw_affiliation_string":"Kennesaw State University, Kennesaw, Ga","institution_ids":["https://openalex.org/I172980758"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172980758"],"apc_list":null,"apc_paid":null,"fwci":0.2896,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.4991538,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"791","last_page":"797"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8100224733352661},{"id":"https://openalex.org/keywords/damages","display_name":"Damages","score":0.736550509929657},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.631845235824585},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5446199774742126},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.5121869444847107},{"id":"https://openalex.org/keywords/overlay","display_name":"Overlay","score":0.4732758700847626},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.4657716453075409},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4576167166233063},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4497218430042267},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4229067862033844},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4222426414489746},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.412562757730484},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.17834815382957458}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8100224733352661},{"id":"https://openalex.org/C2777381055","wikidata":"https://www.wikidata.org/wiki/Q308922","display_name":"Damages","level":2,"score":0.736550509929657},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.631845235824585},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5446199774742126},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5121869444847107},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.4732758700847626},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.4657716453075409},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4576167166233063},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4497218430042267},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4229067862033844},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4222426414489746},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.412562757730484},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.17834815382957458},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2695664.2695946","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2695664.2695946","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1527502244","https://openalex.org/W1774682829","https://openalex.org/W1989549101","https://openalex.org/W2004751526","https://openalex.org/W2011875300","https://openalex.org/W2032270375","https://openalex.org/W2042229489","https://openalex.org/W2063704486","https://openalex.org/W2064378588","https://openalex.org/W2073560096","https://openalex.org/W2083940415","https://openalex.org/W2118278564","https://openalex.org/W2137754413","https://openalex.org/W2147906352","https://openalex.org/W2166381878","https://openalex.org/W2746937343","https://openalex.org/W6638294888"],"related_works":["https://openalex.org/W2124796039","https://openalex.org/W4246766813","https://openalex.org/W4387457408","https://openalex.org/W4390331891","https://openalex.org/W1725082835","https://openalex.org/W613481155","https://openalex.org/W2939806431","https://openalex.org/W3157010849","https://openalex.org/W52209804","https://openalex.org/W3149638606"],"abstract_inverted_index":{"Clickjacking":[0],"attacks":[1,14,85,164],"steal":[2],"user":[3,16,38],"clicks":[4,17,24],"through":[5,106],"the":[6,43,67,80,101,118,142,171],"generation":[7],"of":[8,23,51,83,97,103,108],"webpages":[9],"overlaying":[10],"legitimate":[11],"webpages.":[12,21],"These":[13],"redirect":[15],"to":[18,32,42,65,78,99,116,125,133,137,162],"attacker":[19],"controlled":[20],"Redirection":[22],"can":[25],"cause":[26],"various":[27],"unwanted":[28],"activities":[29],"and":[30,49,57,113,165,173],"damages":[31],"users,":[33],"such":[34],"as":[35],"liking":[36],"a":[37,94],"profile":[39],"not":[40],"known":[41,62],"victim":[44],"on":[45],"social":[46],"networking":[47],"websites,":[48],"changing":[50],"webcam":[52],"setting":[53],"revealing":[54],"personal":[55],"images":[56],"videos.":[58],"There":[59],"are":[60,131,159],"little":[61],"systematic":[63],"methodologies":[64],"compute":[66,79],"risk":[68,81,121],"caused":[69],"by":[70],"clickjacking":[71,84,138,163],"attacks.":[72,119,139],"This":[73],"paper":[74],"presents":[75],"an":[76],"approach":[77],"level":[82,111],"for":[86],"deployed":[87],"applications.":[88,150],"In":[89],"particular,":[90],"our":[91],"contribution":[92],"is":[93],"proposed":[95,143],"set":[96],"metrics":[98,144],"quantify":[100],"magnitude":[102],"attack":[104],"prevalence":[105],"analysis":[107],"relevant":[109],"code":[110],"features":[112],"defense":[114],"mechanisms":[115],"prevent":[117,134],"The":[120],"computation":[122],"enables":[123],"practitioners":[124],"understand":[126],"whether":[127],"more":[128],"mitigation":[129],"techniques":[130],"needed":[132],"losses":[135],"due":[136],"We":[140],"validated":[141],"using":[145],"open":[146],"source":[147],"PHP":[148],"web":[149,157],"Our":[151],"evaluation":[152],"indicates":[153],"that":[154],"some":[155],"popular":[156],"applications":[158],"still":[160],"vulnerable":[161],"they":[166],"require":[167],"further":[168],"protection":[169],"at":[170],"implementation":[172],"environmental":[174],"levels.":[175]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2016,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}