{"id":"https://openalex.org/W2789461465","doi":"https://doi.org/10.1515/popets-2018-0012","title":"Cracking ShadowCrypt: Exploring the Limitations of Secure I/O Systems in Internet Browsers","display_name":"Cracking ShadowCrypt: Exploring the Limitations of Secure I/O Systems in Internet Browsers","publication_year":2018,"publication_date":"2018-02-20","ids":{"openalex":"https://openalex.org/W2789461465","doi":"https://doi.org/10.1515/popets-2018-0012","mag":"2789461465"},"language":"en","primary_location":{"id":"doi:10.1515/popets-2018-0012","is_oa":true,"landing_page_url":"https://doi.org/10.1515/popets-2018-0012","pdf_url":"https://content.sciendo.com/downloadpdf/journals/popets/2018/2/article-p47.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://content.sciendo.com/downloadpdf/journals/popets/2018/2/article-p47.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006884009","display_name":"Michael Freyberger","orcid":null},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael Freyberger","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113907946","display_name":"Warren He","orcid":null},"institutions":[{"id":"https://openalex.org/I134446601","display_name":"Berkeley College","ror":"https://ror.org/02xewxa75","country_code":"US","type":"education","lineage":["https://openalex.org/I134446601"]},{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Warren He","raw_affiliation_strings":["UC Berkeley"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Berkeley","institution_ids":["https://openalex.org/I134446601","https://openalex.org/I95457486"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064923144","display_name":"Devdatta Akhawe","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Devdatta Akhawe","raw_affiliation_strings":["Dropbox"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dropbox","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105206771","display_name":"Michelle L. Mazurek","orcid":"https://orcid.org/0000-0003-4151-6428"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michelle L. Mazurek","raw_affiliation_strings":["University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015619835","display_name":"Prateek Mittal","orcid":"https://orcid.org/0000-0002-4057-0118"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Prateek Mittal","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4161,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.91295219,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2018","issue":"2","first_page":"47","last_page":"63"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6768178939819336},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6526678800582886},{"id":"https://openalex.org/keywords/sketch","display_name":"Sketch","score":0.5869430303573608},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5354123115539551},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4973304569721222},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4363105297088623},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.40387678146362305}],"concepts":[{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6768178939819336},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6526678800582886},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.5869430303573608},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5354123115539551},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4973304569721222},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4363105297088623},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.40387678146362305},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1515/popets-2018-0012","is_oa":true,"landing_page_url":"https://doi.org/10.1515/popets-2018-0012","pdf_url":"https://content.sciendo.com/downloadpdf/journals/popets/2018/2/article-p47.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:06aabc5a68d94ca1a44ad446ee9bfc35","is_oa":false,"landing_page_url":"https://doaj.org/article/06aabc5a68d94ca1a44ad446ee9bfc35","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies, Vol 2018, Iss 2, Pp 47-63 (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1515/popets-2018-0012","is_oa":true,"landing_page_url":"https://doi.org/10.1515/popets-2018-0012","pdf_url":"https://content.sciendo.com/downloadpdf/journals/popets/2018/2/article-p47.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6600000262260437,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1532434344","https://openalex.org/W1582716752","https://openalex.org/W1774682829","https://openalex.org/W2005330022","https://openalex.org/W2010608681","https://openalex.org/W2026843999","https://openalex.org/W2039244047","https://openalex.org/W2065076704","https://openalex.org/W2071800216","https://openalex.org/W2095881341","https://openalex.org/W2096867800","https://openalex.org/W2099889974","https://openalex.org/W2107466081","https://openalex.org/W2122997043","https://openalex.org/W2132324287","https://openalex.org/W2159079348","https://openalex.org/W2159915142","https://openalex.org/W2169768162","https://openalex.org/W2245188914","https://openalex.org/W2295723209","https://openalex.org/W2345444931","https://openalex.org/W2542247256","https://openalex.org/W2566222250","https://openalex.org/W2610383839","https://openalex.org/W2752660817","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2378994405","https://openalex.org/W2385974820","https://openalex.org/W2373478030","https://openalex.org/W2378679551","https://openalex.org/W3149739944","https://openalex.org/W2392363776","https://openalex.org/W2063051341","https://openalex.org/W2591066345","https://openalex.org/W1494563618","https://openalex.org/W2357022711"],"abstract_inverted_index":{"Abstract":[0],"An":[1],"important":[2],"line":[3],"of":[4,11,82,126,140,157,182,196,204],"privacy":[5,180],"research":[6],"is":[7,65],"investigating":[8],"the":[9,35,38,47,80,91,124,127,141,150,155,158,179,202],"design":[10,203],"systems":[12,23,208],"for":[13,26,57,90],"secure":[14,59,101,206],"input":[15],"and":[16,32,37,122],"output":[17],"(I/O)":[18],"within":[19,62,104,209],"Internet":[20,63,105,210],"browsers.":[21,106,211],"These":[22,175],"would":[24],"allow":[25],"users\u2019":[27,48],"information":[28,49],"to":[29,46,86],"be":[30,96,116],"encrypted":[31,51],"decrypted":[33],"by":[34,71,189],"browser,":[36],"specific":[39],"web":[40],"applications":[41],"will":[42,78],"only":[43],"have":[44],"access":[45],"in":[50,84],"form":[52],".":[53],"The":[54],"state-of-the-art":[55],"approach":[56],"a":[58,66,88,100,110,130,194],"I/O":[60,102,207],"system":[61,67,103],"browsers":[64],"called":[68],"ShadowCrypt":[69,83],"created":[70],"UC":[72],"Berkeley":[73],"researchers":[74],"[23].":[75],"This":[76],"paper":[77],"explore":[79],"limitations":[81],"order":[85],"provide":[87],"foundation":[89],"general":[92],"principles":[93],"that":[94,114,168,199],"must":[95],"followed":[97],"when":[98],"designing":[99],"First,":[107],"we":[108,161,192],"developed":[109],"comprehensive":[111],"UI":[112,120,151,173],"attack":[113,128,147,164,176],"cannot":[115],"mitigated":[117],"with":[118],"popular":[119],"defenses,":[121],"tested":[123],"efficacy":[125],"through":[129],"user":[131],"study":[132],"administered":[133],"on":[134],"Amazon":[135],"Mechanical":[136],"Turk.":[137],"Only":[138],"1":[139],"59":[142],"participants":[143],"who":[144],"were":[145],"under":[146],"successfully":[148],"noticed":[149],"attack,":[152],"which":[153],"validates":[154],"stealthiness":[156],"attack.":[159],"Second,":[160],"present":[162,193],"multiple":[163],"vectors":[165,177],"against":[166],"Shadow-Crypt":[167],"do":[169],"not":[170],"rely":[171],"upon":[172],"deception.":[174],"expose":[178],"weaknesses":[181],"Shadow":[183],"DOM\u2014the":[184],"key":[185],"browser":[186],"primitive":[187],"leveraged":[188],"ShadowCrypt.":[190],"Finally,":[191],"sketch":[195],"potential":[197],"countermeasures":[198],"can":[200],"enable":[201],"future":[205]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}