Cross-Site Request Forgeries : Exploitation and Prevention

By W. Zeller, Edward W. Felten. 2008

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

1. Minghong Fang
2. Neil Zhenqiang Gong
3. Adrienne Porter Felt
4. Guolei Yang
5. Steve Hanna
6. Jia Liu
7. Erika Chin
8. Alexander Moshchuk

Citations in the corpus

• Poisoning Attacks to Graph-Based Recommender Systems (2018, background): “, browsing history, via cross-site request forgery (CSRF) [37].”
• Third-Party Web Tracking: Policy and Technology (2012, background): “I. INTRODUCTION The web has evolved to facilitate development and delivery of webpages composed of content from multiple websites.”
• Fake Co-visitation Injection Attacks to Recommender Systems (2017, background): “Pollution attacks suffer from two key limitations: 1) pollution attacks rely on CSRF, which makes it hard to perform the attacks at a large scale, and 2) pollution attacks are not applicable to item-to-item recommendation because the attacker cannot change the item that the user is visiting.”
• Permission Re-Delegation: Attacks and Defenses (2011, background): “Like permission re-delegation, cross-site request forgery (CSRF) is a confused deputy attack that occurs in browsers [40].”