Defeating script injection attacks with browser-enforced embedded policies
By Trevor Jim, Nikhil Swamy, Michael Hicks. The Web Conference, 2007
330 citations recorded by the source corpus.
Subfields: Artificial Intelligence, Information Systems, Signal Processing
View Paper: https://www.semanticscholar.org/paper/bb51fe1cf2d5bc0e534e62b54d2ead62b55adc3c
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Adam Kiezun
- Philip J. Guo
- Michael D. Ernst
- Zhendong Su
- Karthick Jayaraman
- Ranjit Jhala
- Gary Wassermann
- Sorin Lerner
In Information Systems
- Adam Kiezun
- Michael D. Ernst
- Philip J. Guo
- Zhendong Su
- Karthick Jayaraman
- Gary Wassermann
- Ranjit Jhala
- Sorin Lerner
In Signal Processing
- Adam Kiezun
- Michael D. Ernst
- Philip J. Guo
- Karthick Jayaraman
- Zhendong Su
- Gary Wassermann
- Ranjit Jhala
- Sorin Lerner
Citations in the corpus
- Automatic creation of SQL Injection and cross-site scripting attacks (2009, methodology): “Browser-Enforced Embedded Policies combines client- and server-side techniques [11].”
- Static detection of cross-site scripting vulnerabilities (2008, background): “Script by providing a mechanism for the client to enforce either a black-list or white-list policy that the server sends specifying which scripts are trusted [12].”
- An empirical study of privacy-violating information flows in JavaScript web applications (2010, background): “One way to ensure safety on the client is to disallow unknown scripts from executing [16].”