{"id":"https://openalex.org/W3158912279","doi":"https://doi.org/10.1145/3412841.3442036","title":"Preventing server-side request forgery attacks","display_name":"Preventing server-side request forgery attacks","publication_year":2021,"publication_date":"2021-03-22","ids":{"openalex":"https://openalex.org/W3158912279","doi":"https://doi.org/10.1145/3412841.3442036","mag":"3158912279"},"language":"en","primary_location":{"id":"doi:10.1145/3412841.3442036","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3412841.3442036","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 36th Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078849993","display_name":"Bahruz Jabiyev","orcid":null},"institutions":[{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Bahruz Jabiyev","raw_affiliation_strings":["Northeastern University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004815944","display_name":"Omid Mirzaei","orcid":"https://orcid.org/0000-0002-5786-4542"},"institutions":[{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Omid Mirzaei","raw_affiliation_strings":["Northeastern University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069500419","display_name":"Amin Kharraz","orcid":null},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amin Kharraz","raw_affiliation_strings":["Florida International University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Florida International University","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077875821","display_name":"Engin Kirda","orcid":"https://orcid.org/0000-0001-9988-6873"},"institutions":[{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Engin Kirda","raw_affiliation_strings":["Northeastern University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.3464,"has_fulltext":false,"cited_by_count":33,"citation_normalized_percentile":{"value":0.95503123,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1626","last_page":"1635"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7549340128898621},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7362011671066284},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6967219710350037},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.649169921875},{"id":"https://openalex.org/keywords/server-side","display_name":"Server-side","score":0.6239599585533142},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.6115462183952332},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.5194306373596191},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.47343873977661133},{"id":"https://openalex.org/keywords/application-server","display_name":"Application server","score":0.46992409229278564},{"id":"https://openalex.org/keywords/client-side","display_name":"Client-side","score":0.4694095849990845},{"id":"https://openalex.org/keywords/connection","display_name":"Connection (principal bundle)","score":0.4305822253227234},{"id":"https://openalex.org/keywords/file-server","display_name":"File server","score":0.41465139389038086},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.38346248865127563},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2933271825313568},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.29158979654312134},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18785911798477173},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.06908008456230164}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7549340128898621},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7362011671066284},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6967219710350037},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.649169921875},{"id":"https://openalex.org/C14414571","wikidata":"https://www.wikidata.org/wiki/Q519081","display_name":"Server-side","level":2,"score":0.6239599585533142},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.6115462183952332},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.5194306373596191},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.47343873977661133},{"id":"https://openalex.org/C164554305","wikidata":"https://www.wikidata.org/wiki/Q71550","display_name":"Application server","level":2,"score":0.46992409229278564},{"id":"https://openalex.org/C202477664","wikidata":"https://www.wikidata.org/wiki/Q1352449","display_name":"Client-side","level":2,"score":0.4694095849990845},{"id":"https://openalex.org/C13355873","wikidata":"https://www.wikidata.org/wiki/Q2920850","display_name":"Connection (principal bundle)","level":2,"score":0.4305822253227234},{"id":"https://openalex.org/C4373008","wikidata":"https://www.wikidata.org/wiki/Q513349","display_name":"File server","level":2,"score":0.41465139389038086},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.38346248865127563},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2933271825313568},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.29158979654312134},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18785911798477173},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.06908008456230164},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3412841.3442036","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3412841.3442036","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 36th Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6200000047683716,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G3511218687","display_name":null,"funder_award_id":"CNS-1703454","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W1619421141","https://openalex.org/W2046166587","https://openalex.org/W2496974405","https://openalex.org/W2511418200","https://openalex.org/W2725419186","https://openalex.org/W2962768977","https://openalex.org/W4254697110"],"related_works":["https://openalex.org/W4302890120","https://openalex.org/W2373688948","https://openalex.org/W1572845294","https://openalex.org/W2146230088","https://openalex.org/W190032850","https://openalex.org/W2380006330","https://openalex.org/W603964185","https://openalex.org/W2188617335","https://openalex.org/W3197191334","https://openalex.org/W3108017933"],"abstract_inverted_index":{"In":[0],"today's":[1],"web,":[2],"it":[3],"is":[4,85,104],"not":[5],"uncommon":[6],"for":[7],"web":[8,22],"applications":[9],"to":[10,32,39,54,80],"take":[11],"a":[12,25,30,88],"complete":[13],"URL":[14,37],"as":[15],"input":[16],"from":[17],"users.":[18],"Usually,":[19],"once":[20],"the":[21,27,36,44,48,50,83,93,99],"application":[23],"receives":[24],"URL,":[26],"server":[28,45,51,84],"opens":[29],"connection":[31],"it.":[33],"However,":[34],"if":[35,82],"points":[38],"an":[40],"internal":[41,69],"service":[42],"and":[43,75],"still":[46],"makes":[47],"connection,":[49],"becomes":[52],"vulnerable":[53],"Server-Side":[55],"Request":[56],"Forgery":[57],"(SSRF)":[58],"attacks.":[59],"These":[60],"attacks":[61,103],"can":[62],"be":[63],"highly":[64],"destructive":[65,74],"when":[66],"they":[67],"exploit":[68],"services.":[70],"They":[71],"are":[72],"equally":[73],"need":[76],"much":[77],"less":[78],"effort":[79],"succeed":[81],"hosted":[86],"in":[87],"cloud":[89,97],"environment.":[90],"Therefore,":[91],"with":[92],"growing":[94],"use":[95],"of":[96,101],"computing,":[98],"threat":[100],"SSRF":[102],"becoming":[105],"more":[106],"serious.":[107]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}