{"id":"https://openalex.org/W4311165747","doi":"https://doi.org/10.1145/3564625.3567987","title":"DeView: Confining Progressive Web Applications by Debloating Web APIs","display_name":"DeView: Confining Progressive Web Applications by Debloating Web APIs","publication_year":2022,"publication_date":"2022-12-03","ids":{"openalex":"https://openalex.org/W4311165747","doi":"https://doi.org/10.1145/3564625.3567987"},"language":"en","primary_location":{"id":"doi:10.1145/3564625.3567987","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3564625.3567987","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3564625.3567987","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3564625.3567987","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027768748","display_name":"ChangSeok Oh","orcid":"https://orcid.org/0000-0002-3808-5412"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"ChangSeok Oh","raw_affiliation_strings":["Georgia Institute of Technology, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-3808-5412","affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, United States of America","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100330701","display_name":"Sangho Lee","orcid":"https://orcid.org/0000-0002-0412-7768"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sangho Lee","raw_affiliation_strings":["Microsoft Research, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-0412-7768","affiliations":[{"raw_affiliation_string":"Microsoft Research, United States of America","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071764813","display_name":"Chenxiong Qian","orcid":"https://orcid.org/0000-0002-6201-6011"},"institutions":[{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Chenxiong Qian","raw_affiliation_strings":["University of Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0002-6201-6011","affiliations":[{"raw_affiliation_string":"University of Hong Kong, China","institution_ids":["https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002028881","display_name":"Hyungjoon Koo","orcid":"https://orcid.org/0000-0003-0799-0230"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hyungjoon Koo","raw_affiliation_strings":["Sungkyunkwan University, Korea, South \u2013 Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0003-0799-0230","affiliations":[{"raw_affiliation_string":"Sungkyunkwan University, Korea, South \u2013 Republic of Korea","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047140382","display_name":"Wenke Lee","orcid":"https://orcid.org/0000-0003-2761-1277"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenke Lee","raw_affiliation_strings":["Georgia Institute of Technology, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-2761-1277","affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, United States of America","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5534,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.62978255,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"881","last_page":"895"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.781238853931427},{"id":"https://openalex.org/keywords/web-api","display_name":"Web API","score":0.7252023816108704},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.5819598436355591},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.572609543800354},{"id":"https://openalex.org/keywords/mashup","display_name":"Mashup","score":0.48883503675460815},{"id":"https://openalex.org/keywords/application-programming-interface","display_name":"Application programming interface","score":0.48318877816200256},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.47181236743927},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4654354155063629},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.44360512495040894},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.437380850315094},{"id":"https://openalex.org/keywords/web-modeling","display_name":"Web modeling","score":0.4348507821559906},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2320830225944519},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.08236053586006165}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.781238853931427},{"id":"https://openalex.org/C127613066","wikidata":"https://www.wikidata.org/wiki/Q557770","display_name":"Web API","level":4,"score":0.7252023816108704},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5819598436355591},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.572609543800354},{"id":"https://openalex.org/C196126337","wikidata":"https://www.wikidata.org/wiki/Q821080","display_name":"Mashup","level":4,"score":0.48883503675460815},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.48318877816200256},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.47181236743927},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4654354155063629},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.44360512495040894},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.437380850315094},{"id":"https://openalex.org/C130436687","wikidata":"https://www.wikidata.org/wiki/Q7978591","display_name":"Web modeling","level":3,"score":0.4348507821559906},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2320830225944519},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.08236053586006165}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3564625.3567987","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3564625.3567987","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3564625.3567987","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:hub.hku.hk:10722/320326","is_oa":false,"landing_page_url":"https://hub.hku.hk/handle/10722/320326","pdf_url":null,"source":{"id":"https://openalex.org/S4377196271","display_name":"The HKU Scholars Hub (University of Hong Kong)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I889458895","host_organization_name":"University of Hong Kong","host_organization_lineage":["https://openalex.org/I889458895"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference_Paper"}],"best_oa_location":{"id":"doi:10.1145/3564625.3567987","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3564625.3567987","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3564625.3567987","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G193629969","display_name":null,"funder_award_id":"2022-0-01199","funder_id":"https://openalex.org/F4320335489","funder_display_name":"Institute for Information and Communications Technology Promotion"},{"id":"https://openalex.org/G4700831490","display_name":null,"funder_award_id":"2022-","funder_id":"https://openalex.org/F4320335489","funder_display_name":"Institute for Information and Communications Technology Promotion"},{"id":"https://openalex.org/G6252393565","display_name":null,"funder_award_id":"2022-0-01199","funder_id":"https://openalex.org/F4320321378","funder_display_name":"Sungkyunkwan University"},{"id":"https://openalex.org/G8267509939","display_name":null,"funder_award_id":"2022-0-01199","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"}],"funders":[{"id":"https://openalex.org/F4320321378","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20"},{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"},{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4311165747.pdf","grobid_xml":"https://content.openalex.org/works/W4311165747.grobid-xml"},"referenced_works_count":36,"referenced_works":["https://openalex.org/W29750197","https://openalex.org/W1516183691","https://openalex.org/W1966862293","https://openalex.org/W1979800405","https://openalex.org/W1988143662","https://openalex.org/W2007287520","https://openalex.org/W2066784081","https://openalex.org/W2085257011","https://openalex.org/W2102332597","https://openalex.org/W2102346397","https://openalex.org/W2122685385","https://openalex.org/W2153479685","https://openalex.org/W2163193804","https://openalex.org/W2170902130","https://openalex.org/W2229758354","https://openalex.org/W2403389194","https://openalex.org/W2554411508","https://openalex.org/W2741175893","https://openalex.org/W2766494751","https://openalex.org/W2790761820","https://openalex.org/W2868191876","https://openalex.org/W2890733335","https://openalex.org/W2890977390","https://openalex.org/W2891688103","https://openalex.org/W2903017094","https://openalex.org/W2914982603","https://openalex.org/W2921892740","https://openalex.org/W2964203713","https://openalex.org/W2985879431","https://openalex.org/W2991611768","https://openalex.org/W2995931433","https://openalex.org/W3030553796","https://openalex.org/W3094180604","https://openalex.org/W3097781304","https://openalex.org/W3106588244","https://openalex.org/W4383890039"],"related_works":["https://openalex.org/W3150083517","https://openalex.org/W2756226611","https://openalex.org/W3114642817","https://openalex.org/W2147899997","https://openalex.org/W2911522936","https://openalex.org/W233028058","https://openalex.org/W2111074577","https://openalex.org/W141137031","https://openalex.org/W2080905619","https://openalex.org/W2091418534"],"abstract_inverted_index":{"A":[0,51],"progressive":[1],"web":[2,16,90,114,126,132,155,161,185],"application":[3],"(PWA)":[4],"becomes":[5],"an":[6,32,66,73,135],"attractive":[7],"option":[8],"for":[9],"building":[10],"universal":[11],"applications":[12],"based":[13],"on":[14,134,199],"feature-rich":[15],"Application":[17],"Programming":[18],"Interfaces":[19],"(APIs).":[20],"While":[21],"flexible,":[22],"such":[23],"vast":[24],"APIs":[25,133,156,186],"inevitably":[26],"bring":[27],"a":[28,40,63,88,98,107,168],"significant":[29],"increase":[30],"in":[31,167],"API":[33,57,127,162],"attack":[34,58,104],"surface,":[35],"which":[36],"commonly":[37],"corresponds":[38],"to":[39,54],"functionality":[41,68],"that":[42,101,129,148],"is":[43,60,69,78],"neither":[44],"needed":[45,131],"nor":[46],"wanted":[47],"by":[48,109,123,138],"the":[49,56,81,103,118,150,158,173],"application.":[50,74],"promising":[52],"approach":[53,100],"reduce":[55],"surface":[59,105],"software":[61],"debloating,":[62],"technique":[64],"wherein":[65],"unused":[67],"programmatically":[70],"removed":[71],"from":[72,157],"Unfortunately,":[75],"debloating":[76,122,147],"PWAs":[77],"challenging,":[79],"given":[80],"monolithic":[82],"design":[83],"and":[84,143,163,175,192],"non-deterministic":[85],"execution":[86],"of":[87,106,120,153,177,183,196],"modern":[89],"browser.":[91],"In":[92],"this":[93],"paper,":[94],"we":[95],"present":[96],"DeView,":[97],"practical":[99],"reduces":[102],"PWA":[108,121],"blocking":[110],"unnecessary":[111],"but":[112],"accessible":[113,184],"APIs.":[115],"DeView":[116,179],"tackles":[117],"challenges":[119],"i)":[124,188],"record-and-replay":[125],"profiling":[128],"identifies":[130],"app-by-app":[136],"basis":[137],"replaying":[139],"(recorded)":[140],"browser":[141,146],"interactions":[142],"ii)":[144,193],"compiler-assisted":[145],"eliminates":[149,181],"entry":[151,165],"functions":[152],"corresponding":[154],"mapping":[159],"between":[160],"its":[164],"point":[166],"binary.":[169],"Our":[170],"evaluation":[171],"shows":[172],"effectiveness":[174],"practicality":[176],"DeView.":[178],"successfully":[180],"91.8%":[182],"while":[187],"maintaining":[189],"original":[190],"functionalities":[191],"preventing":[194],"76.3%":[195],"known":[197],"exploits":[198],"average.":[200]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}