{"id":"https://openalex.org/W4298076494","doi":"https://doi.org/10.1145/3538969.3538977","title":"Web Cryptography API: Prevalence and Possible Developer Mistakes","display_name":"Web Cryptography API: Prevalence and Possible Developer Mistakes","publication_year":2022,"publication_date":"2022-08-17","ids":{"openalex":"https://openalex.org/W4298076494","doi":"https://doi.org/10.1145/3538969.3538977"},"language":"en","primary_location":{"id":"doi:10.1145/3538969.3538977","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3538969.3538977","pdf_url":null,"source":{"id":"https://openalex.org/S4363608926","display_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013951588","display_name":"Pascal Wichmann","orcid":"https://orcid.org/0000-0002-8969-4277"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Pascal Wichmann","raw_affiliation_strings":["Security in Distributed Systems, Universit\u00e4t Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security in Distributed Systems, Universit\u00e4t Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064214382","display_name":"Maximilian Blochberger","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maximilian Blochberger","raw_affiliation_strings":["Security in Distributed Systems, Universit\u00e4t Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security in Distributed Systems, Universit\u00e4t Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004687145","display_name":"Hannes Federrath","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hannes Federrath","raw_affiliation_strings":["Security in Distributed Systems, Universit\u00e4t Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security in Distributed Systems, Universit\u00e4t Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I159176309"],"apc_list":null,"apc_paid":null,"fwci":0.5534,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.62111203,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7777333855628967},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.709235668182373},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.6856210231781006},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.6288092732429504},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.6263924837112427},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.6175416707992554},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5670555830001831},{"id":"https://openalex.org/keywords/web-api","display_name":"Web API","score":0.5452027320861816},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.5324260592460632},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.5261922478675842},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.49708226323127747},{"id":"https://openalex.org/keywords/web-modeling","display_name":"Web modeling","score":0.4292842745780945},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42342519760131836},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.4101410508155823}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7777333855628967},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.709235668182373},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.6856210231781006},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.6288092732429504},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.6263924837112427},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6175416707992554},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5670555830001831},{"id":"https://openalex.org/C127613066","wikidata":"https://www.wikidata.org/wiki/Q557770","display_name":"Web API","level":4,"score":0.5452027320861816},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.5324260592460632},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.5261922478675842},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.49708226323127747},{"id":"https://openalex.org/C130436687","wikidata":"https://www.wikidata.org/wiki/Q7978591","display_name":"Web modeling","level":3,"score":0.4292842745780945},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42342519760131836},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.4101410508155823},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3538969.3538977","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3538969.3538977","pdf_url":null,"source":{"id":"https://openalex.org/S4363608926","display_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1976371754","https://openalex.org/W2007425631","https://openalex.org/W2008810193","https://openalex.org/W2033890725","https://openalex.org/W2045591401","https://openalex.org/W2092115639","https://openalex.org/W2112833606","https://openalex.org/W2156186849","https://openalex.org/W2236793250","https://openalex.org/W2548788256","https://openalex.org/W2752929869","https://openalex.org/W2767943400","https://openalex.org/W2895212262","https://openalex.org/W2904027722","https://openalex.org/W2955799979","https://openalex.org/W2962940036","https://openalex.org/W2963663395","https://openalex.org/W2964144088","https://openalex.org/W2964203713","https://openalex.org/W2972924654","https://openalex.org/W2978283677","https://openalex.org/W2979528578","https://openalex.org/W2987467625","https://openalex.org/W3003683799","https://openalex.org/W3014817913","https://openalex.org/W3100328669"],"related_works":["https://openalex.org/W2907490423","https://openalex.org/W2548409577","https://openalex.org/W1531015913","https://openalex.org/W3129846904","https://openalex.org/W3180404666","https://openalex.org/W2407701912","https://openalex.org/W1484631816","https://openalex.org/W24906233","https://openalex.org/W3157804828","https://openalex.org/W1967778478"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3,33,54],"analyze":[4],"mistakes":[5,24,39],"that":[6,74],"web":[7,64,80],"developers":[8],"can":[9,29],"make":[10],"when":[11],"using":[12],"the":[13,19,22,47,50,67,92,108],"Web":[14,51,109],"Cryptography":[15,52,110],"API.":[16,111],"We":[17],"evaluate":[18,56],"impact":[20],"of":[21,49,79,94],"uncovered":[23],"and":[25,69],"discuss":[26],"how":[27,57],"they":[28],"be":[30],"prevented.":[31],"Furthermore,":[32],"derive":[34],"best":[35],"practices":[36],"from":[37],"these":[38],"to":[40,43,107],"provide":[41],"guidance":[42],"developers.":[44],"To":[45],"assess":[46],"relevance":[48],"API,":[53],"empirically":[55],"prevalently":[58],"it":[59],"is":[60,91],"used":[61,87],"by":[62,89],"popular":[63],"applications":[65,81],"on":[66],"Internet":[68],"in":[70,103],"GitHub":[71],"repositories,":[72],"finding":[73],"only":[75],"a":[76],"small":[77],"proportion":[78],"use":[82],"it.":[83],"The":[84],"most":[85],"widely":[86],"operation":[88],"far":[90],"generation":[93],"cryptographically":[95],"secure":[96],"random":[97],"values,":[98],"which":[99],"was":[100],"not":[101],"possible":[102],"browser-based":[104],"JavaScript":[105],"prior":[106]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}