{"id":"https://openalex.org/W2258082031","doi":"https://doi.org/10.1145/2736277.2741630","title":"Understanding Malvertising Through Ad-Injecting Browser Extensions","display_name":"Understanding Malvertising Through Ad-Injecting Browser Extensions","publication_year":2015,"publication_date":"2015-05-18","ids":{"openalex":"https://openalex.org/W2258082031","doi":"https://doi.org/10.1145/2736277.2741630","mag":"2258082031"},"language":"en","primary_location":{"id":"doi:10.1145/2736277.2741630","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2736277.2741630","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th International Conference on World Wide Web","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041094652","display_name":"Xinyu Xing","orcid":"https://orcid.org/0000-0001-6733-226X"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinyu Xing","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101960529","display_name":"Wei Meng","orcid":"https://orcid.org/0000-0001-8260-3304"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei Meng","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081545538","display_name":"Byoungyoung Lee","orcid":"https://orcid.org/0000-0001-7746-0572"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Byoungyoung Lee","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000980244","display_name":"Udi Weinsberg","orcid":"https://orcid.org/0000-0002-6966-1945"},"institutions":[{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]},{"id":"https://openalex.org/I4210114444","display_name":"Meta (United States)","ror":"https://ror.org/01zbnvs85","country_code":"US","type":"company","lineage":["https://openalex.org/I4210114444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Udi Weinsberg","raw_affiliation_strings":["Facebook Inc., Menlo Park, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Facebook Inc., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I4210114444","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111515855","display_name":"Anmol Sheth","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anmol Sheth","raw_affiliation_strings":["A9.com/Amazon, Palo Alto, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"A9.com/Amazon, Palo Alto, CA, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071832270","display_name":"Roberto Perdisci","orcid":"https://orcid.org/0000-0002-7339-0041"},"institutions":[{"id":"https://openalex.org/I165733156","display_name":"University of Georgia","ror":"https://ror.org/00te3t702","country_code":"US","type":"education","lineage":["https://openalex.org/I165733156"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Roberto Perdisci","raw_affiliation_strings":["University of Georgia, Athens, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Georgia, Athens, GA, USA","institution_ids":["https://openalex.org/I165733156"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047140382","display_name":"Wenke Lee","orcid":"https://orcid.org/0000-0003-2761-1277"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenke Lee","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":28.0354,"has_fulltext":false,"cited_by_count":90,"citation_normalized_percentile":{"value":0.9949662,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1286","last_page":"1295"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/monetization","display_name":"Monetization","score":0.8528359532356262},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7596817016601562},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7307490706443787},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.586786687374115},{"id":"https://openalex.org/keywords/installation","display_name":"Installation","score":0.5656692385673523},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5637255907058716},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.5416638255119324},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4954577684402466},{"id":"https://openalex.org/keywords/revenue","display_name":"Revenue","score":0.4345536231994629},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3429776132106781},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14663571119308472}],"concepts":[{"id":"https://openalex.org/C2780602052","wikidata":"https://www.wikidata.org/wiki/Q289845","display_name":"Monetization","level":2,"score":0.8528359532356262},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7596817016601562},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7307490706443787},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.586786687374115},{"id":"https://openalex.org/C146778888","wikidata":"https://www.wikidata.org/wiki/Q836862","display_name":"Installation","level":2,"score":0.5656692385673523},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5637255907058716},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.5416638255119324},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4954577684402466},{"id":"https://openalex.org/C195487862","wikidata":"https://www.wikidata.org/wiki/Q850210","display_name":"Revenue","level":2,"score":0.4345536231994629},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3429776132106781},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14663571119308472},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/2736277.2741630","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2736277.2741630","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th International Conference on World Wide Web","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.695.8368","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.695.8368","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.www2015.it/documents/proceedings/proceedings/p1286.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1521413888","https://openalex.org/W1552906779","https://openalex.org/W1688725932","https://openalex.org/W1985683032","https://openalex.org/W2012286502","https://openalex.org/W2014589236","https://openalex.org/W2014742088","https://openalex.org/W2040977706","https://openalex.org/W2069263935","https://openalex.org/W2095610745","https://openalex.org/W2169771430","https://openalex.org/W2404981861","https://openalex.org/W3122794887"],"related_works":["https://openalex.org/W4296873905","https://openalex.org/W4312342191","https://openalex.org/W2990215692","https://openalex.org/W2520281795","https://openalex.org/W2956015248","https://openalex.org/W4323565542","https://openalex.org/W4297808986","https://openalex.org/W72090","https://openalex.org/W20878794","https://openalex.org/W4240504770"],"abstract_inverted_index":{"Malvertising":[0],"is":[1,16],"a":[2,35,117,175],"malicious":[3,41,135],"activity":[4],"that":[5,63,66,89,119,126,157,164],"leverages":[6],"advertising":[7,15],"to":[8,39,50,55,101],"distribute":[9],"various":[10],"forms":[11],"of":[12,37,77,98,111,179],"malware.":[13,106],"Because":[14],"the":[17,75,96,109],"key":[18],"revenue":[19],"generator":[20],"for":[21,52],"numerous":[22],"Internet":[23],"companies,":[24],"large":[25],"ad":[26,45,87,171],"networks,":[27],"such":[28],"as":[29,69,134],"Google,":[30],"Yahoo":[31],"and":[32,122,129,160,173],"Microsoft,":[33],"invest":[34],"lot":[36],"effort":[38],"mitigate":[40],"ads":[42,68,85,133],"from":[43,86],"their":[44,70,140],"networks.":[46],"This":[47],"drives":[48],"adversaries":[49],"look":[51],"alternative":[53],"methods":[54],"deploy":[56],"malvertising.":[57,78],"In":[58],"this":[59],"paper,":[60],"we":[61,114,145],"show":[62],"browser":[64,124,151],"extensions":[65,82,93,125,156,163],"use":[67],"monetization":[71],"strategy":[72],"often":[73],"facilitate":[74],"deployment":[76],"Moreover,":[79],"while":[80],"some":[81],"simply":[83],"serve":[84],"networks":[88,172],"support":[90],"malvertising,":[91],"other":[92],"maliciously":[94],"alter":[95],"content":[97],"visited":[99],"webpages":[100],"force":[102],"users":[103],"into":[104],"installing":[105],"To":[107],"measure":[108],"extent":[110],"these":[112,132],"behaviors":[113],"developed":[115],"Expector,":[116,144],"system":[118],"automatically":[120,146],"inspects":[121],"identifies":[123],"inject":[127,158],"ads,":[128,159],"then":[130],"classifies":[131],"or":[136],"benign":[137],"based":[138],"on":[139],"landing":[141],"pages.":[142],"Using":[143],"inspected":[147],"over":[148],"18,000":[149],"Chrome":[150],"extensions.":[152],"We":[153],"found":[154],"292":[155],"detected":[161],"56":[162],"participate":[165],"in":[166],"malvertising":[167],"using":[168],"16":[169],"different":[170],"with":[174],"total":[176],"user":[177],"base":[178],"602,417.":[180]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":9},{"year":2019,"cited_by_count":12},{"year":2018,"cited_by_count":11},{"year":2017,"cited_by_count":13},{"year":2016,"cited_by_count":8},{"year":2015,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}