{"id":"https://openalex.org/W4405513875","doi":"https://doi.org/10.1145/3708514","title":"Ransomware Over Modern Web Browsers: A Novel Strain and a New Defense Mechanism","display_name":"Ransomware Over Modern Web Browsers: A Novel Strain and a New Defense Mechanism","publication_year":2024,"publication_date":"2024-12-17","ids":{"openalex":"https://openalex.org/W4405513875","doi":"https://doi.org/10.1145/3708514"},"language":"en","primary_location":{"id":"doi:10.1145/3708514","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3708514","pdf_url":null,"source":{"id":"https://openalex.org/S131231701","display_name":"ACM Transactions on the Web","issn_l":"1559-1131","issn":["1559-1131","1559-114X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on the Web","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3708514","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060971626","display_name":"Harun Oz","orcid":"https://orcid.org/0000-0002-2650-2055"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Harun Oz","raw_affiliation_strings":["Florida International University, Miami, United States"],"raw_orcid":"https://orcid.org/0000-0002-2650-2055","affiliations":[{"raw_affiliation_string":"Florida International University, Miami, United States","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062234261","display_name":"G\u00fcliz Seray Tuncay","orcid":"https://orcid.org/0009-0003-5472-141X"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"G\u00fcliz Seray Tuncay","raw_affiliation_strings":["Google, California, United States"],"raw_orcid":"https://orcid.org/0009-0003-5472-141X","affiliations":[{"raw_affiliation_string":"Google, California, United States","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078506948","display_name":"Ahmet Ar\u0131\u015f","orcid":"https://orcid.org/0000-0003-4114-5321"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmet Aris","raw_affiliation_strings":["Florida International University, Miami, United States"],"raw_orcid":"https://orcid.org/0000-0003-4114-5321","affiliations":[{"raw_affiliation_string":"Florida International University, Miami, United States","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027087892","display_name":"Abbas Acar","orcid":"https://orcid.org/0000-0002-4891-160X"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abbas Acar","raw_affiliation_strings":["Florida International University, Miami, United States"],"raw_orcid":"https://orcid.org/0000-0002-4891-160X","affiliations":[{"raw_affiliation_string":"Florida International University, Miami, United States","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085312553","display_name":"Leonardo Babun","orcid":"https://orcid.org/0000-0002-7082-8423"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Leonardo Babun","raw_affiliation_strings":["Florida International University, Miami, United States"],"raw_orcid":"https://orcid.org/0000-0002-7082-8423","affiliations":[{"raw_affiliation_string":"Florida International University, Miami, United States","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019145852","display_name":"A. Selcuk Uluagac","orcid":"https://orcid.org/0000-0002-9823-3464"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Selcuk Uluagac","raw_affiliation_strings":["Florida International University, Miami, United States"],"raw_orcid":"https://orcid.org/0000-0002-9823-3464","affiliations":[{"raw_affiliation_string":"Florida International University, Miami, United States","institution_ids":["https://openalex.org/I19700959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8637,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.72534345,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"19","issue":"1","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.803647518157959},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6853397488594055},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.6132069230079651},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5408307909965515},{"id":"https://openalex.org/keywords/web-browser","display_name":"Web browser","score":0.5219516158103943},{"id":"https://openalex.org/keywords/strain","display_name":"Strain (injury)","score":0.4349077343940735},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3416099548339844},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2522165775299072},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.2186560332775116},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.20168325304985046}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.803647518157959},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6853397488594055},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.6132069230079651},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5408307909965515},{"id":"https://openalex.org/C2983909278","wikidata":"https://www.wikidata.org/wiki/Q6368","display_name":"Web browser","level":3,"score":0.5219516158103943},{"id":"https://openalex.org/C2778022156","wikidata":"https://www.wikidata.org/wiki/Q576145","display_name":"Strain (injury)","level":2,"score":0.4349077343940735},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3416099548339844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2522165775299072},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2186560332775116},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.20168325304985046},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C105702510","wikidata":"https://www.wikidata.org/wiki/Q514","display_name":"Anatomy","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3708514","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3708514","pdf_url":null,"source":{"id":"https://openalex.org/S131231701","display_name":"ACM Transactions on the Web","issn_l":"1559-1131","issn":["1559-1131","1559-114X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on the Web","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3708514","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3708514","pdf_url":null,"source":{"id":"https://openalex.org/S131231701","display_name":"ACM Transactions on the Web","issn_l":"1559-1131","issn":["1559-1131","1559-114X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on the Web","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7799999713897705,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G5795309500","display_name":null,"funder_award_id":"H982302110324","funder_id":"https://openalex.org/F4320311089","funder_display_name":"National Security Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309993","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07"},{"id":"https://openalex.org/F4320311089","display_name":"National Security Agency","ror":"https://ror.org/0047bvr32"},{"id":"https://openalex.org/F4320333707","display_name":"Florida Center for Cybersecurity, University of South Florida","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W2076342816","https://openalex.org/W2511701350","https://openalex.org/W2558619741","https://openalex.org/W2559964890","https://openalex.org/W2601591992","https://openalex.org/W2752929869","https://openalex.org/W2764249719","https://openalex.org/W2800509541","https://openalex.org/W2807312247","https://openalex.org/W2890196927","https://openalex.org/W2898664598","https://openalex.org/W2902302694","https://openalex.org/W2911731407","https://openalex.org/W2962912862","https://openalex.org/W2972552958","https://openalex.org/W2974072230","https://openalex.org/W2978765985","https://openalex.org/W2989588798","https://openalex.org/W3000953536","https://openalex.org/W3013296001","https://openalex.org/W3017363795","https://openalex.org/W3024437525","https://openalex.org/W3091876964","https://openalex.org/W3132588576","https://openalex.org/W3158020972","https://openalex.org/W4228999312","https://openalex.org/W4255357946","https://openalex.org/W4256215416","https://openalex.org/W4285122532","https://openalex.org/W4285886199","https://openalex.org/W4287884602","https://openalex.org/W4301329292","https://openalex.org/W4382396050","https://openalex.org/W4388857868","https://openalex.org/W4389319264","https://openalex.org/W4396757598","https://openalex.org/W4400020428","https://openalex.org/W4402892716","https://openalex.org/W4406891735","https://openalex.org/W4407681793"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4232561318","https://openalex.org/W3202245533","https://openalex.org/W4253977752","https://openalex.org/W2942879794","https://openalex.org/W2964829536","https://openalex.org/W2904586340","https://openalex.org/W3120595989"],"abstract_inverted_index":{"Ransomware":[0],"is":[1],"an":[2],"increasingly":[3],"prevalent":[4],"form":[5],"of":[6,99,113,239,242],"malware":[7],"targeting":[8],"end-users,":[9],"governments,":[10],"and":[11,45,65,86,104,110,125,148,155,170,224,244],"businesses.":[12],"As":[13],"it":[14,57],"has":[15],"evolved,":[16],"adversaries":[17],"added":[18],"new":[19,204],"capabilities":[20],"to":[21,63,190,230],"their":[22],"arsenal.":[23],"We":[24,69,161,235,259],"propose":[25,200],"a":[26,185,203,226,237],"next-generation":[27],"browser-based":[28,255],"ransomware,":[29],"R\u00f8B":[30,48,94,133,164,188,208,232,253],",":[31,202],"which":[32],"performs":[33],"its":[34,191],"malicious":[35,67],"actions":[36],"via":[37,221],"web":[38,214],"technologies,":[39],"File":[40],"System":[41],"Access":[42],"API":[43,51,220],"(FSA)":[44],"WebAssembly":[46],"(Wasm).":[47],"uses":[49,225],"this":[50,196,270],"through":[52],"the":[53,61,102,180,213,218],"victims\u2019":[54],"browsers;":[55],"hence,":[56],"does":[58],"not":[59],"require":[60],"victims":[62],"download":[64],"install":[66],"binaries.":[68],"performed":[70],"extensive":[71],"evaluations":[72,91],"with":[73,139],"three":[74],"different":[75],"OSs,":[76],"23":[77],"file":[78],"formats,":[79],"29":[80],"distinct":[81,192],"directories,":[82,106],"five":[83],"cloud":[84,121],"providers,":[85],"four":[87],"antivirus":[88,141,168],"solutions.":[89],"Our":[90,115],"show":[92,248],"that":[93,119,151,163,216,249,265],"can":[95,128,165,251],"encrypt":[96,171],"various":[97],"types":[98],"files":[100],"in":[101,179,195,269],"local":[103],"cloud-integrated":[105],"external":[107],"storage":[108],"devices,":[109],"network-shared":[111],"folders":[112],"victims.":[114],"experiments":[116],"also":[117,182,199,260],"reveal":[118],"popular":[120],"solutions,":[122],"Box":[123],"Individual":[124],"Apple":[126],"iCloud":[127],"be":[129,184,267],"severely":[130],"affected":[131],"by":[132],".":[134],"Moreover,":[135,174],"we":[136,198],"conducted":[137],"tests":[138],"commercial":[140],"software":[142,169],"such":[143],"as":[144],"AVG,":[145],"Avast,":[146],"Kaspersky,":[147],"Malware":[149],"Bytes":[150],"perform":[152],"sensitive":[153],"directory":[154],"suspicious":[156],"behavior":[157],"monitoring":[158],"against":[159,187],"ransomware.":[160],"verified":[162],"evade":[166],"these":[167],"victim":[172],"files.":[173],"existing":[175],"ransomware":[176,256],"detection":[177,205],"solutions":[178],"literature":[181],"cannot":[183],"remedy":[186],"due":[189],"features.":[193],"Therefore,":[194],"paper,":[197],"R\u00f8Bguard":[201,211,243,250],"system":[206],"for":[207],"-like":[209,233,254],"attacks.":[210,234],"monitors":[212],"applications":[215],"use":[217],"FSA":[219],"function":[222],"hooking":[223],"machine":[227],"learning":[228],"classifier":[229],"detect":[231,252],"implemented":[236],"proof":[238],"concept":[240],"version":[241],"our":[245],"evaluation":[246],"results":[247],"attacks":[257],"effectively.":[258],"provide":[261],"future":[262],"research":[263],"directions":[264],"should":[266],"addressed":[268],"domain.":[271]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}