{"id":"https://openalex.org/W3172367785","doi":"https://doi.org/10.1145/3433210.3437524","title":"Oversharing Is Not Caring: How CNAME Cloaking Can Expose Your Session Cookies","display_name":"Oversharing Is Not Caring: How CNAME Cloaking Can Expose Your Session Cookies","publication_year":2021,"publication_date":"2021-05-24","ids":{"openalex":"https://openalex.org/W3172367785","doi":"https://doi.org/10.1145/3433210.3437524","mag":"3172367785"},"language":"en","primary_location":{"id":"doi:10.1145/3433210.3437524","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3433210.3437524","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103886720","display_name":"Assel Aliyeva","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Assel Aliyeva","raw_affiliation_strings":["Boston University, Boston, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Boston University, Boston, MA, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044975798","display_name":"Manuel Egele","orcid":"https://orcid.org/0000-0001-5038-2682"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Manuel Egele","raw_affiliation_strings":["Boston University, Boston, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Boston University, Boston, MA, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.9538,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.95596189,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"123","last_page":"134"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.7268199920654297},{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.7153313755989075},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6814514994621277},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.6023147106170654},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5250425338745117},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4834243059158325},{"id":"https://openalex.org/keywords/web-analytics","display_name":"Web analytics","score":0.4681088626384735},{"id":"https://openalex.org/keywords/cloaking","display_name":"Cloaking","score":0.463195264339447},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3536376953125},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.287595272064209},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.23263686895370483},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.19633516669273376},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.16956761479377747}],"concepts":[{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.7268199920654297},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.7153313755989075},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6814514994621277},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6023147106170654},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5250425338745117},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4834243059158325},{"id":"https://openalex.org/C516187249","wikidata":"https://www.wikidata.org/wiki/Q10719477","display_name":"Web analytics","level":5,"score":0.4681088626384735},{"id":"https://openalex.org/C62973154","wikidata":"https://www.wikidata.org/wiki/Q868018","display_name":"Cloaking","level":3,"score":0.463195264339447},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3536376953125},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.287595272064209},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.23263686895370483},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.19633516669273376},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.16956761479377747},{"id":"https://openalex.org/C49040817","wikidata":"https://www.wikidata.org/wiki/Q193091","display_name":"Optoelectronics","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C110367647","wikidata":"https://www.wikidata.org/wiki/Q497166","display_name":"Metamaterial","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3433210.3437524","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3433210.3437524","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6100000143051147,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1200299632","https://openalex.org/W1911851747","https://openalex.org/W2025636081","https://openalex.org/W2069434875","https://openalex.org/W2123539383","https://openalex.org/W2268157125","https://openalex.org/W2400264373","https://openalex.org/W2509745758","https://openalex.org/W2535603283","https://openalex.org/W2562362575","https://openalex.org/W2585847175","https://openalex.org/W2733005124","https://openalex.org/W2794855529","https://openalex.org/W2806944993","https://openalex.org/W2958793707","https://openalex.org/W2987547013","https://openalex.org/W3153325860","https://openalex.org/W3201673895","https://openalex.org/W4240486361","https://openalex.org/W4254935592","https://openalex.org/W4301113013"],"related_works":["https://openalex.org/W2252599600","https://openalex.org/W3031462818","https://openalex.org/W4385976368","https://openalex.org/W2139279342","https://openalex.org/W1633257170","https://openalex.org/W2615638395","https://openalex.org/W211701069","https://openalex.org/W2262505815","https://openalex.org/W2411471604","https://openalex.org/W2953370833"],"abstract_inverted_index":{"In":[0],"modern":[1],"web":[2,9],"ecosystem,":[3],"online":[4,97],"businesses":[5,38,63,85],"often":[6,86],"leverage":[7],"third-party":[8,32,43],"analytics":[10,44,93],"services":[11],"to":[12,22,41,57,64],"gain":[13],"insights":[14],"into":[15],"the":[16,23,62,77,84,92],"behavior":[17],"of":[18,49],"their":[19,50,70,88],"users.":[20],"Due":[21],"recent":[24],"privacy":[25],"enhancements":[26],"in":[27,100],"major":[28],"browsers":[29],"that":[30],"restrict":[31],"cookie":[33],"usage":[34],"for":[35,79],"tracking,":[36],"these":[37],"were":[39],"urged":[40],"disguise":[42],"infrastructure":[45],"as":[46,58,83],"regular":[47],"subdomains":[48],"websites":[51],"[3].":[52],"The":[53],"integration":[54],"technique":[55],"referred":[56],"CNAME":[59],"cloaking":[60],"allows":[61],"continue":[65],"monitoring":[66],"user":[67,98],"activity":[68],"on":[69],"websites.":[71],"However,":[72],"it":[73],"also":[74],"opens":[75],"up":[76],"possibility":[78],"severe":[80],"security":[81],"infractions":[82],"share":[87],"session":[89],"cookies":[90],"with":[91],"providers,":[94],"thus":[95],"putting":[96],"accounts":[99],"danger.":[101]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}