Keyword

browser security

Description: The field concerned with protecting web browsers and their users from software vulnerabilities, malicious content, and attacks on private data.

Primary topic: Web Application Security Vulnerabilities (30%)

Wikidata ID: wiki/Q4976859

OpenAlex ID: keywords/browser-security

You've been warned

2008 · Serge Egelman, Lorrie Faith Cranor, et al. · ACM SIGCHI Conference on Human Factors in Computing Systems (CHI) · 608

Detection and analysis of drive-by-download attacks and malicious JavaScript code

2010 · Marco Cova, Christopher Kruegel, et al. · International World Wide Web Conference (WWW) · 580

Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis.

2007 · Philipp Vogt, Florian Nentwich, et al. · Network and Distributed System Security Symposium · 485

Permission re-delegation: attacks and defenses

2011 · Adrienne Porter Felt, Helen J. Wang, et al. · 471

Robust defenses for cross-site request forgery

2008 · Adam Barth, Collin Jackson, et al. · Proceedings of the ACM Conference on Computer and Communications Security · 421

Crying Wolf: An Empirical Study of SSL Warning Effectiveness

2018 · Sunshine, Joshua, Egelman, Serge, et al. · KiltHub Repository · 331

Defeating script injection attacks with browser-enforced embedded policies

2007 · Trevor Jim, Nikhil Swamy, et al. · International World Wide Web Conference (WWW) · 282

The Spy in the Sandbox

2015 · Yossef Oren, Vasileios P. Kemerlis, et al. · ACM SIGSAC Conference on Computer and Communications Security (CCS) · 263

FPDetective

2013 · Gunes Acar, Marc Juarez, et al. · 260

Noninterference through Secure Multi-execution

2010 · Dominique Devriese, Frank Piessens · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 247

PDF

Staged information flow for javascript

2009 · Ravi Chugh, Jeffrey A. Meister, et al. · Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation · 241

NOZZLE: a defense against heap-spraying code injection attacks

2009 · Paruj Ratanaworabhan, Benjamin Livshits, et al. · 209

Blueprint: Robust Prevention of Cross-site Scripting Attacks for Existing Browsers

2009 · Mike Ter Louw, V.N. Venkatakrishnan · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 205

Mobile Security Catching Up? Revealing the Nuts and Bolts of the Security of Mobile Devices

2011 · Michael Becher, Felix C. Freiling, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 190

JavaScript instrumentation for browser security

2007 · Dachuan Yu, Ajay Chander, et al. · ACM SIGPLAN Notices · 178

Regular expressions considered harmful in client-side XSS filters

2010 · Daniel Bates, Adam Barth, et al. · International World Wide Web Conference (WWW) · 175

Trusted paths for browsers

2005 · Zishuang (Eileen) Ye, Sean Smith, et al. · ACM Transactions on Information and System Security · 175

Secure Web Browsing with the OP Web Browser

2008 · Chris Grier, Shuo Tang, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 171

An analysis of private browsing modes in modern browsers

2010 · Gaurav Aggarwal, Elie Bursztein, et al. · 165

The multi-principal OS construction of the gazelle web browser

2009 · Helen J. Wang, Chris Grier, et al. · 164

Undangle: early detection of dangling pointers in use-after-free and double-free vulnerabilities

2012 · Juan Caballero, Gustavo Grieco, et al. · International Symposium on Software Testing and Analysis · 161

Defending Browsers against Drive-by Downloads: Mitigating Heap-Spraying Code Injection Attacks

2009 · Manuel Egele, Peter Wurzinger, et al. · Lecture notes in computer science · 161

Native Client

2009 · Bennet Yee, David Sehr, et al. · Communications of the ACM · 148

Analyzing Information Flow in JavaScript-Based Browser Extensions

2009 · Mohan Dhawan, Vinod Ganapathy · Annual Computer Security Applications Conference · 133

FlowFox

2012 · Willem De Groef, Dominique Devriese, et al. · Proceedings of the ACM Conference on Computer and Communications Security · 132

PDF

Works count: 2,048

Citation count: 18,440