{"id":"https://openalex.org/W2536013516","doi":"https://doi.org/10.1145/2976749.2978384","title":"CSPAutoGen","display_name":"CSPAutoGen","publication_year":2016,"publication_date":"2016-10-24","ids":{"openalex":"https://openalex.org/W2536013516","doi":"https://doi.org/10.1145/2976749.2978384","mag":"2536013516"},"language":"en","primary_location":{"id":"doi:10.1145/2976749.2978384","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2976749.2978384","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2978384&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=2978384&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076349830","display_name":"Xiang Pan","orcid":"https://orcid.org/0000-0003-3890-6599"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiang Pan","raw_affiliation_strings":["Northwestern University, Evanston, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070605476","display_name":"Yinzhi Cao","orcid":"https://orcid.org/0000-0002-9618-4830"},"institutions":[{"id":"https://openalex.org/I186143895","display_name":"Lehigh University","ror":"https://ror.org/012afjb06","country_code":"US","type":"education","lineage":["https://openalex.org/I186143895"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yinzhi Cao","raw_affiliation_strings":["Lehigh University, Bethlehem, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lehigh University, Bethlehem, PA, USA","institution_ids":["https://openalex.org/I186143895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039815644","display_name":"Shuangping Liu","orcid":"https://orcid.org/0000-0001-6029-3245"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shuangping Liu","raw_affiliation_strings":["Northwestern University, Evanston, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088478402","display_name":"Yu Zhou","orcid":"https://orcid.org/0000-0002-1623-7948"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yu Zhou","raw_affiliation_strings":["Northwestern University, Evanston, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006905226","display_name":"Yan Chen","orcid":"https://orcid.org/0000-0002-7679-1713"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Chen","raw_affiliation_strings":["Zhejiang University & Northwestern University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University & Northwestern University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049140408","display_name":"Tingzhe Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I186143895","display_name":"Lehigh University","ror":"https://ror.org/012afjb06","country_code":"US","type":"education","lineage":["https://openalex.org/I186143895"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tingzhe Zhou","raw_affiliation_strings":["Lehigh University, Bethlehem, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lehigh University, Bethlehem, PA, USA","institution_ids":["https://openalex.org/I186143895"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":43,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"653","last_page":"665"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9684000015258789,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.8666880130767822},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8562161922454834},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.6945224404335022},{"id":"https://openalex.org/keywords/client-side","display_name":"Client-side","score":0.6647171378135681},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5470167398452759},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.5092705488204956},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4663993716239929},{"id":"https://openalex.org/keywords/dynamic-web-page","display_name":"Dynamic web page","score":0.43155401945114136},{"id":"https://openalex.org/keywords/server-side","display_name":"Server-side","score":0.42849215865135193},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.4130544364452362},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3421863317489624},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3347727060317993},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.2240438461303711},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.10215654969215393}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.8666880130767822},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8562161922454834},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6945224404335022},{"id":"https://openalex.org/C202477664","wikidata":"https://www.wikidata.org/wiki/Q1352449","display_name":"Client-side","level":2,"score":0.6647171378135681},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5470167398452759},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.5092705488204956},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4663993716239929},{"id":"https://openalex.org/C100158260","wikidata":"https://www.wikidata.org/wiki/Q1650567","display_name":"Dynamic web page","level":3,"score":0.43155401945114136},{"id":"https://openalex.org/C14414571","wikidata":"https://www.wikidata.org/wiki/Q519081","display_name":"Server-side","level":2,"score":0.42849215865135193},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.4130544364452362},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3421863317489624},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3347727060317993},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.2240438461303711},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.10215654969215393},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2976749.2978384","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2976749.2978384","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2978384&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/2976749.2978384","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2976749.2978384","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=2978384&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6100000143051147,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1573650146","display_name":null,"funder_award_id":"CNS-1563843","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4037859840","display_name":null,"funder_award_id":"FA8650-15-C-7561","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G4204503947","display_name":"EAGER: Real-time Enforcement of Content Security Policy upon Real-world Websites","funder_award_id":"1646662","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5051192394","display_name":null,"funder_award_id":"FA8650-15-C","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G6149905650","display_name":"TWC: Medium: Collaborative: Efficient Repair of Learning Systems via Machine Unlearning","funder_award_id":"1563843","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6652165491","display_name":null,"funder_award_id":"61472209","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8004302654","display_name":"\u57fa\u4e8e\u591a\u6e90\u6a21\u677f\u91cd\u6784\u7684\u793e\u4ea4\u7f51\u7edc\u5783\u573e\u4fe1\u606f\u5728\u7ebf\u68c0\u6d4b\u65b9\u6cd5\u7814\u7a76","funder_award_id":"61472359","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8947385245","display_name":null,"funder_award_id":"CNS-1563843,CNS-1646662","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2536013516.pdf","grobid_xml":"https://content.openalex.org/works/W2536013516.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W58852127","https://openalex.org/W142308502","https://openalex.org/W150512592","https://openalex.org/W200873936","https://openalex.org/W1454815643","https://openalex.org/W1505465226","https://openalex.org/W1561387739","https://openalex.org/W1882350379","https://openalex.org/W1917555234","https://openalex.org/W1974977720","https://openalex.org/W1990421186","https://openalex.org/W1991074244","https://openalex.org/W2033368661","https://openalex.org/W2059725703","https://openalex.org/W2085925880","https://openalex.org/W2091747079","https://openalex.org/W2094415856","https://openalex.org/W2094568767","https://openalex.org/W2111487235","https://openalex.org/W2115980831","https://openalex.org/W2122633288","https://openalex.org/W2123582298","https://openalex.org/W2125357166","https://openalex.org/W2132733485","https://openalex.org/W2141988808","https://openalex.org/W2148001343","https://openalex.org/W2151619740","https://openalex.org/W2162316255","https://openalex.org/W2168563136","https://openalex.org/W2170920217","https://openalex.org/W2344312925","https://openalex.org/W2400162242","https://openalex.org/W2405282478","https://openalex.org/W2407789839","https://openalex.org/W4240951837"],"related_works":["https://openalex.org/W2571973613","https://openalex.org/W2609132699","https://openalex.org/W2024474165","https://openalex.org/W3197726148","https://openalex.org/W2104452318","https://openalex.org/W2148211687","https://openalex.org/W2799662300","https://openalex.org/W4313523259","https://openalex.org/W2187721372","https://openalex.org/W2738706866"],"abstract_inverted_index":{"Content":[0],"security":[1],"policy":[2],"(CSP)":[3],"which":[4],"has":[5],"been":[6],"standardized":[7],"by":[8,12],"W3C":[9],"and":[10,77,108,126,134,143],"adopted":[11],"all":[13,140],"major":[14],"commercial":[15],"browsers-is":[16],"one":[17],"of":[18,33,53,64,129],"the":[19,42,62,95,101,123,141],"most":[20,124],"promising":[21],"approaches":[22],"for":[23,88],"defending":[24],"against":[25],"cross-site":[26],"scripting":[27],"(XSS)":[28],"attacks.":[29],"Although":[30],"client-side":[31],"adoption":[32,38,63],"CSP":[34,71,130],"is":[35,39,118],"successful,":[36],"server-side":[37],"far":[40],"behind":[41],"client":[43,115],"side:":[44],"according":[45],"to":[46,69,103,114,120],"a":[47],"large-scale":[48],"survey,":[49],"less":[50],"than":[51],"0.002%":[52],"Alexa":[54],"Top":[55],"1M":[56],"websites":[57],"enabled":[58],"CSP.":[59],"To":[60],"facilitate":[61],"CSP,":[65],"we":[66],"propose":[67],"CSPAutoGen":[68,84,117,137],"enable":[70],"in":[72],"real-time,":[73],"without":[74,131],"server":[75],"modifications,":[76],"being":[78],"compatible":[79],"with":[80],"real-world":[81],"websites.":[82],"Specifically,":[83],"trains":[85],"so-called":[86],"templates":[87],"each":[89],"domain,":[90],"generates":[91],"CSPs":[92],"based":[93],"on":[94,100],"templates,":[96],"rewrites":[97],"incoming":[98],"webpages":[99,113],"fly":[102],"apply":[104],"those":[105,111],"generated":[106],"CSPs,":[107],"then":[109],"serves":[110],"rewritten":[112],"browsers.":[116],"designed":[119],"automatically":[121],"enforce":[122],"secure":[125],"strict":[127],"version":[128],"enabling":[132],"\"unsafe-inline\"":[133],"\"unsafe-eval\",":[135],"i.e.,":[136],"can":[138],"handle":[139],"inline":[142],"dynamic":[144],"scripts.":[145]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2016-10-28T00:00:00"}