{"id":"https://openalex.org/W2945870337","doi":"https://doi.org/10.1155/2019/2156906","title":"WebMTD: Defeating Cross-Site Scripting Attacks Using Moving Target Defense","display_name":"WebMTD: Defeating Cross-Site Scripting Attacks Using Moving Target Defense","publication_year":2019,"publication_date":"2019-05-14","ids":{"openalex":"https://openalex.org/W2945870337","doi":"https://doi.org/10.1155/2019/2156906","mag":"2945870337"},"language":"en","primary_location":{"id":"doi:10.1155/2019/2156906","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2019/2156906","pdf_url":"http://downloads.hindawi.com/journals/scn/2019/2156906.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"http://downloads.hindawi.com/journals/scn/2019/2156906.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011198056","display_name":"Amirreza Niakanlahiji","orcid":"https://orcid.org/0000-0002-7282-1575"},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Amirreza Niakanlahiji","raw_affiliation_strings":["UNC Charlotte, USA"],"raw_orcid":"https://orcid.org/0000-0002-7282-1575","affiliations":[{"raw_affiliation_string":"UNC Charlotte, USA","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023197641","display_name":"Jafar Haadi Jafarian","orcid":"https://orcid.org/0000-0001-8115-085X"},"institutions":[{"id":"https://openalex.org/I921990950","display_name":"University of Colorado Denver","ror":"https://ror.org/02hh7en24","country_code":"US","type":"education","lineage":["https://openalex.org/I921990950"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jafar Haadi Jafarian","raw_affiliation_strings":["University of Colorado Denver, USA"],"raw_orcid":"https://orcid.org/0000-0001-8115-085X","affiliations":[{"raw_affiliation_string":"University of Colorado Denver, USA","institution_ids":["https://openalex.org/I921990950"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5011198056"],"corresponding_institution_ids":["https://openalex.org/I102149020"],"apc_list":{"value":2670,"currency":"USD","value_usd":2670},"apc_paid":{"value":2670,"currency":"USD","value_usd":2670},"fwci":1.9481,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.89986969,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"2019","issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9787999987602234,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.9611185789108276},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8759304285049438},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.7592839598655701},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5555883049964905},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.5510032773017883},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.5416143536567688},{"id":"https://openalex.org/keywords/backward-compatibility","display_name":"Backward compatibility","score":0.5147688388824463},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.49603137373924255},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.4896441102027893},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4637700915336609},{"id":"https://openalex.org/keywords/client-side-scripting","display_name":"Client-side scripting","score":0.41640979051589966},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3430689573287964},{"id":"https://openalex.org/keywords/web-api","display_name":"Web API","score":0.31497126817703247},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.2964523434638977},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2501481771469116}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.9611185789108276},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8759304285049438},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.7592839598655701},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5555883049964905},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5510032773017883},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.5416143536567688},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.5147688388824463},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.49603137373924255},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.4896441102027893},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4637700915336609},{"id":"https://openalex.org/C195274430","wikidata":"https://www.wikidata.org/wiki/Q1650567","display_name":"Client-side scripting","level":5,"score":0.41640979051589966},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3430689573287964},{"id":"https://openalex.org/C127613066","wikidata":"https://www.wikidata.org/wiki/Q557770","display_name":"Web API","level":4,"score":0.31497126817703247},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.2964523434638977},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2501481771469116}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1155/2019/2156906","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2019/2156906","pdf_url":"http://downloads.hindawi.com/journals/scn/2019/2156906.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b56632e446ed43568847ce5a604f8d03","is_oa":false,"landing_page_url":"https://doaj.org/article/b56632e446ed43568847ce5a604f8d03","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Security and Communication Networks, Vol 2019 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1155/2019/2156906","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2019/2156906","pdf_url":"http://downloads.hindawi.com/journals/scn/2019/2156906.pdf","source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6499999761581421}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2945870337.pdf","grobid_xml":"https://content.openalex.org/works/W2945870337.grobid-xml"},"referenced_works_count":4,"referenced_works":["https://openalex.org/W1598083179","https://openalex.org/W1612694023","https://openalex.org/W2046312985","https://openalex.org/W2159670077"],"related_works":["https://openalex.org/W187998727","https://openalex.org/W1531015913","https://openalex.org/W2326682353","https://openalex.org/W4244258610","https://openalex.org/W4319431564","https://openalex.org/W2046312985","https://openalex.org/W1566985031","https://openalex.org/W1983343365","https://openalex.org/W3157804828","https://openalex.org/W2267593226"],"abstract_inverted_index":{"Existing":[0],"mitigation":[1],"techniques":[2,60],"for":[3],"cross-site":[4,114],"scripting":[5,115],"attacks":[6,65,117],"have":[7],"not":[8,92],"been":[9],"widely":[10],"adopted,":[11],"primarily":[12],"due":[13,186],"to":[14,34,45,63,138,187],"imposing":[15,67],"impractical":[16],"overheads":[17],"on":[18,31,118,122],"developers,":[19,32],"Web":[20,23,37,119,127,136,156],"servers,":[21],"or":[22,43,159],"browsers.":[24],"They":[25],"either":[26],"enforce":[27],"restrictive":[28],"coding":[29],"practices":[30],"fail":[33,44],"support":[35],"legacy":[36],"applications,":[38],"demand":[39],"browser":[40,47,160],"code":[41,142,146,161],"modification,":[42],"provide":[46],"backward":[48,192],"compatibility.":[49],"Moving":[50],"target":[51,106],"defense":[52,107],"(MTD)":[53],"is":[54,76,91,152],"a":[55,88,103,172],"novel":[56],"proactive":[57,104],"class":[58],"of":[59,84,113,125,132,135],"that":[61,90,109,168,179],"aim":[62],"defeat":[64],"by":[66,78,95],"uncertainty":[68,75],"in":[69,87],"attack":[70],"reconnaissance":[71],"and":[72,80,147,194],"planning.":[73],"This":[74],"achieved":[77],"frequent":[79],"random":[81],"mutation":[82],"(randomization)":[83],"system":[85],"configuration":[86],"manner":[89],"traceable":[93],"(predictable)":[94],"attackers.":[96],"In":[97],"this":[98,151],"paper,":[99],"we":[100,166,177],"present":[101],"WebMTD,":[102],"moving":[105],"mechanism":[108],"thwarts":[110],"various":[111],"kinds":[112],"(XSS)":[116],"applications.":[120],"Relying":[121],"built-in":[123],"features":[124],"modern":[126],"browsers,":[128],"WebMTD":[129,169],"randomizes":[130],"values":[131],"certain":[133],"attributes":[134],"elements":[137],"differentiate":[139],"the":[140,144],"application":[141],"from":[143],"injected":[145],"disallow":[148],"its":[149,188],"execution;":[150],"done":[153],"without":[154],"requiring":[155],"developer":[157],"involvement":[158],"modification.":[162],"Through":[163],"rigorous":[164],"evaluation,":[165],"show":[167],"has":[170],"very":[171],"low":[173,195],"performance":[174],"overhead.":[175,196],"Also,":[176],"argue":[178],"our":[180],"technique":[181],"outperforms":[182],"all":[183],"competing":[184],"approaches":[185],"broad":[189],"effectiveness,":[190],"transparency,":[191],"compatibility,":[193]},"counts_by_year":[{"year":2024,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}