Measure The Web

User Tools

Site Tools

Trace:
literature:bibliography

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
literature:bibliography [2026/08/28 20:39] – Add genkin2022_lend, qiu2023_calpric, pu2023_deepfake for programming:deployment; restore the possessive apostrophe in the NDSS 2015 typosquatting title. Authored by Claude. karel.kubicek.claudeliterature:bibliography [2026/08/31 19:47] (current) – Add 15 BibTeX entries for privacy:browser_storage (browser storage beyond cookies). Keys checked against all 703 existing entries for collisions, DOIs/URLs checked for the same paper under another key, titles similarity-scanned; all DOIs resolved via Cros karel.kubicek.claude
Line 6541: Line 6541:
   series        = {IEEE S&P 2023},   series        = {IEEE S&P 2023},
   doi           = {10.1109/sp46215.2023.10179387},   doi           = {10.1109/sp46215.2023.10179387},
 +}
 +
 +@inproceedings{li2021_good,
 +  author        = {Li, Xigao and Azad, Babak Amin and Rahmati, Amir and Nikiforakis, Nick},
 +  title         = {Good Bot, Bad Bot: Characterizing Automated Browsing Activity},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2021},
 +  series        = {IEEE S&P 2021},
 +  doi           = {10.1109/sp40001.2021.00079},
 +}
 +
 +
 +@inproceedings{herley2022_automated,
 +  author        = {Herley, Cormac},
 +  title         = {Automated Detection of Automated Traffic},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2022},
 +  series        = {USENIX Security 2022},
 +  url           = {https://www.usenix.org/conference/usenixsecurity22/presentation/herley},
 +}
 +
 +
 +@inproceedings{venugopalan2025_inconsistent,
 +  author        = {Venugopalan, Hari and Munir, Shaoor and Ahmed, Shuaib and Wang, Tangbaihe and King, Samuel T. and Shafiq, Zubair},
 +  title         = {FP-Inconsistent: Measurement and Analysis of Fingerprint Inconsistencies in Evasive Bot Traffic},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2025},
 +  series        = {IMC 2025},
 +  doi           = {10.1145/3730567.3732919},
 +}
 +
 +
 +@inproceedings{jan2020_throwing,
 +  author        = {Jan, Steve T. K. and Hao, Qingying and Hu, Tianrui and Pu, Jiameng and Oswal, Sonal and Wang, Gang and Viswanath, Bimal},
 +  title         = {Throwing Darts in the Dark? Detecting Bots with Limited Data using Neural Data Augmentation},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2020},
 +  series        = {IEEE S&P 2020},
 +  doi           = {10.1109/sp40000.2020.00079},
 +}
 +
 +
 +@inproceedings{liu2025_somesite,
 +  author        = {Liu, Enze and Luo, Elisa and Shan, Shawn and Voelker, Geoffrey M. and Zhao, Ben Y. and Savage, Stefan},
 +  title         = {Somesite I Used To Crawl: Awareness, Agency and Efficacy in Protecting Content Creators From AI Crawlers},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2025},
 +  series        = {IMC 2025},
 +  doi           = {10.1145/3730567.3732913},
 +}
 +
 +
 +@inproceedings{cui2025_odyssey,
 +  author        = {Cui, Jian and Zha, Mingming and Wang, XiaoFeng and Liao, Xiaojing},
 +  title         = {The Odyssey of robots.txt Governance: Measuring Convention Implications of Web Bots in Large Language Model Services},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2025},
 +  series        = {CCS 2025},
 +  doi           = {10.1145/3719027.3765063},
 +}
 +
 +
 +@inproceedings{kim2025_scrapers,
 +  author        = {Kim, Taein and Bock, Karstan and Luo, Claire and Liswood, Amanda and Poroslay, Chloe and Wenger, Emily},
 +  title         = {Scrapers Selectively Respect robots.txt Directives: Evidence From a Large-Scale Empirical Study},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2025},
 +  series        = {IMC 2025},
 +  doi           = {10.1145/3730567.3764471},
 +}
 +
 +
 +@inproceedings{qi2026_viper,
 +  author        = {Qi, Minfeng and He, Dongyang and Wang, Qin and Zhang, Lefeng},
 +  title         = {VIPER Strike: Defeating Visual Reasoning CAPTCHAs via Structured Vision–Language Inference},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2026},
 +  series        = {USENIX Security 2026},
 +  url           = {https://www.usenix.org/conference/usenixsecurity26/presentation/qi-minfeng},
 +}
 +
 +
 +@inproceedings{nguyen2024_frame,
 +  author        = {Nguyen, Hoang Dai and Subramani, Karthika and Acharya, Bhupendra and Perdisci, Roberto and Vadrevu, Phani},
 +  title         = {C-Frame: Characterizing and measuring in-the-wild CAPTCHA attacks},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2024},
 +  series        = {IEEE S&P 2024},
 +  doi           = {10.1109/sp54263.2024.00200},
 +}
 +
 +
 +@inproceedings{ardi2023_prevalence,
 +  author        = {Ardi, Calvin and Calder, Matt},
 +  title         = {The Prevalence of Single Sign-On on the Web: Towards the Next Generation of Web Content Measurement},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2023},
 +  series        = {IMC 2023},
 +  doi           = {10.1145/3618257.3624841},
 +}
 +
 +
 +@inproceedings{wang2011_cloak,
 +  author        = {Wang, David Y. and Savage, Stefan and Voelker, Geoffrey M.},
 +  title         = {Cloak and dagger: dynamics of web search cloaking},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2011},
 +  series        = {CCS 2011},
 +  doi           = {10.1145/2046707.2046763},
 +}
 +
 +
 +@inproceedings{maroofi2020_human,
 +  author        = {Maroofi, Sourena and Korczynski, Maciej and Duda, Andrzej},
 +  title         = {Are You Human?: Resilience of Phishing Detection to Evasion Techniques Based on Human Verification},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2020},
 +  series        = {IMC 2020},
 +  doi           = {10.1145/3419394.3423632},
 +}
 +
 +
 +@inproceedings{szurdi2021_where,
 +  author        = {Szurdi, Janos and Luo, Meng and Kondracki, Brian and Nikiforakis, Nick and Christin, Nicolas},
 +  title         = {Where are you taking me?Understanding Abusive Traffic Distribution Systems},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2021},
 +  series        = {TheWebConf 2021},
 +  doi           = {10.1145/3442381.3450071},
 +}
 +
 +
 +@inproceedings{shi2020_text,
 +  author        = {Shi, Chenghui and Ji, Shouling and Liu, Qianjun and Liu, Changchang and Chen, Yuefeng and He, Yuan and Liu, Zhe and Beyah, Raheem and Wang, Ting},
 +  title         = {Text Captcha Is Dead? A Large Scale Deployment and Empirical Study},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2020},
 +  series        = {CCS 2020},
 +  doi           = {10.1145/3372297.3417258},
 +}
 +
 +
 +@inproceedings{oh2017_fingerprinting,
 +  author        = {Oh, Se Eun and Li, Shuai and Hopper, Nicholas},
 +  title         = {Fingerprinting Keywords in Search Queries over Tor},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2017},
 +  series        = {PETS 2017},
 +  doi           = {10.1515/popets-2017-0048},
 +}
 +
 +@inproceedings{campobasso2020_impersonation,
 +  author        = {Campobasso, Michele and Allodi, Luca},
 +  title         = {Impersonation-as-a-Service: Characterizing the Emerging Criminal Infrastructure for User Impersonation at Scale},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2020},
 +  series        = {CCS 2020},
 +  doi           = {10.1145/3372297.3417892},
 +}
 +
 +@inproceedings{steiner2026_nlweb,
 +  author        = {Steiner, Aaron and Peeters, Ralph and Bizer, Christian},
 +  title         = {MCP vs RAG vs NLWeb vs HTML: A Comparison of the Effectiveness and Efficiency of Different Agent Interfaces to the Web},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2026},
 +  series        = {TheWebConf 2026},
 +  doi           = {10.1145/3774904.3792893},
 +}
 +
 +@inproceedings{jeong2026_network,
 +  author        = {Jeong, Hyejun and Teymoorianfard, Mohammadreza and Kumar, Abhinav and Houmansadr, Amir and Bagdasarian, Eugene},
 +  title         = {Network-Level Prompt and Trait Leakage in Local Research Agents},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2026},
 +  series        = {USENIX Security 2026},
 +  url           = {https://www.usenix.org/conference/usenixsecurity26/presentation/jeong},
 +}
 +
 +@inproceedings{zhao2026_parasites,
 +  author        = {Zhao, Shuli and Hou, Qinsheng and Zhan, Zihan and Wang, Yanhao and Xie, Yuchong and Guo, Yu and Chen, Libo and Li, Shenghong and Xue, Zhi},
 +  title         = {Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the {MCP} Ecosystem},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2026},
 +  series        = {IEEE S&P 2026},
 +  doi           = {10.1109/sp63933.2026.00154},
 +}
 +
 +@article{ramesh2026_webspeval,
 +  author        = {Ramesh, Guruprasad Viswanathan and Nayak, Asmit and Siddique, Basieem and Fawaz, Kassem},
 +  title         = {WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks},
 +  journal       = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2026},
 +  volume        = {2026},
 +  number        = {4},
 +  pages         = {666--702},
 +  doi           = {10.56553/popets-2026-0140},
 +}
 +
 +@inproceedings{chang2026_overcoming,
 +  author        = {Chang, Hongyan and Bao, Ergute and Luo, Xinjian and Yu, Ting},
 +  title         = {Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for {LLM} Systems},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2026},
 +  series        = {USENIX Security 2026},
 +  url           = {https://www.usenix.org/conference/usenixsecurity26/presentation/chang-hongyan},
 +}
 +
 +@inproceedings{shuba2018_nomoads,
 +  author        = {Shuba, Anastasia and Markopoulou, Athina and Shafiq, Zubair},
 +  title         = {NoMoAds: Effective and Efficient Cross-App Mobile Ad-Blocking},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2018},
 +  series        = {PoPETs 2018},
 +  doi           = {10.1515/popets-2018-0035},
 +}
 +
 +@inproceedings{shuba2020_nomoats,
 +  author        = {Shuba, Anastasia and Markopoulou, Athina},
 +  title         = {NoMoATS: Towards Automatic Detection of Mobile Tracking},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2020},
 +  series        = {PoPETs 2020},
 +  doi           = {10.2478/popets-2020-0017},
 +}
 +
 +@inproceedings{varmarken2020_smart,
 +  author        = {Varmarken, Janus and Le, Hieu and Shuba, Anastasia and Markopoulou, Athina and Shafiq, Zubair},
 +  title         = {The TV is Smart and Full of Trackers: Measuring Smart TV Advertising and Tracking},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2020},
 +  series        = {PoPETs 2020},
 +  doi           = {10.2478/popets-2020-0021},
 +}
 +
 +@inproceedings{watanabe2020_melting,
 +  author        = {Watanabe, Takuya and Shioji, Eitaro and Akiyama, Mitsuaki and Mori, Tatsuya},
 +  title         = {Melting Pot of Origins: Compromising the Intermediary Web Services that Rehost Websites},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2020},
 +  series        = {NDSS 2020},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/melting-pot-of-origins-compromising-the-intermediary-web-services-that-rehost-websites/},
 +}
 +
 +@inproceedings{ali2023_navigating,
 +  author        = {Ali, Mir Masood and Chitale, Binoy and Ghasemisharif, Mohammad and Kanich, Chris and Nikiforakis, Nick and Polakis, Jason},
 +  title         = {Navigating Murky Waters: Automated Browser Feature Testing for Uncovering Tracking Vectors},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2023},
 +  series        = {NDSS 2023},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/navigating-murky-waters-automated-browser-feature-testing-for-uncovering-tracking-vectors/},
 +}
 +
 +@inproceedings{singh2010_incoherencies,
 +  author        = {Singh, Kapil and Moshchuk, Alexander and Wang, Helen J. and Lee, Wenke},
 +  title         = {On the Incoherencies in Web Browser Access Control Policies},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2010},
 +  series        = {IEEE S&P 2010},
 +  doi           = {10.1109/sp.2010.35},
 +}
 +
 +@inproceedings{liu2024_promises,
 +  author        = {Liu, Xiaoyin and Li, Wenzhi and Hou, Qinsheng and Yang, Shishuai and Ying, Lingyun and Diao, Wenrui and Li, Yanan and Guo, Shanqing and Duan, Haixin},
 +  title         = {From Promises to Practice: Evaluating the Private Browsing Modes of Android Browser Apps},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2024},
 +  series        = {TheWebConf 2024},
 +  doi           = {10.1145/3589334.3645320},
 +}
 +
 +@inproceedings{zhou2015_monitoring,
 +  author        = {Zhou, Yuchen and Evans, David},
 +  title         = {Understanding and Monitoring Embedded Web Scripts},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2015},
 +  series        = {IEEE S&P 2015},
 +  doi           = {10.1109/sp.2015.57},
 +}
 +
 +@inproceedings{kancherla2025_least,
 +  author        = {Kancherla, Gayatri Priyadarsini and Goel, Dishank and Bichhawat, Abhishek},
 +  title         = {Least Privilege Access for Persistent Storage Mechanisms in Web Browsers},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2025},
 +  series        = {TheWebConf 2025},
 +  doi           = {10.1145/3696410.3714887},
 +}
 +
 +@inproceedings{karami2021_awakening,
 +  author        = {Karami, Soroush and Ilia, Panagiotis and Polakis, Jason},
 +  title         = {Awakening the Web's Sleeper Agents: Misusing Service Workers for Privacy Leakage},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2021},
 +  series        = {NDSS 2021},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/awakening-the-webs-sleeper-agents-misusing-service-workers-for-privacy-leakage/},
 +}
 +
 +@inproceedings{lee2018_pride,
 +  author        = {Lee, Jiyeon and Kim, Hayeon and Park, Junghwan and Shin, Insik and Son, Sooel},
 +  title         = {Pride and Prejudice in Progressive Web Apps: Abusing Native App-like Features in Web Applications},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2018},
 +  series        = {CCS 2018},
 +  doi           = {10.1145/3243734.3243867},
 +}
 +
 +@inproceedings{mishra2021_dejavu,
 +  author        = {Mishra, Vikas and Laperdrix, Pierre and Rudametkin, Walter and Rouvoy, Romain},
 +  title         = {D\'ej\`a vu: Abusing Browser Cache Headers to Identify and Track Online Users},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2021},
 +  series        = {PETS 2021},
 +  doi           = {10.2478/popets-2021-0033},
 +}
 +
 +@inproceedings{snyder2023_poolparty,
 +  author        = {Snyder, Peter and Karami, Soroush and Edelstein, Arthur and Livshits, Benjamin and Haddadi, Hamed},
 +  title         = {Pool-Party: Exploiting Browser Resource Pools for Web Tracking},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2023},
 +  series        = {USENIX Security 2023},
 +  url           = {https://www.usenix.org/conference/usenixsecurity23/presentation/snyder},
 +}
 +
 +@inproceedings{aggarwal2010_analysis,
 +  author        = {Aggarwal, Gaurav and Bursztein, Elie and Jackson, Collin and Boneh, Dan},
 +  title         = {An Analysis of Private Browsing Modes in Modern Browsers},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2010},
 +  series        = {USENIX Security 2010},
 +  url           = {https://www.usenix.org/legacy/event/sec10/tech/full_papers/Aggarwal.pdf},
 +}
 +
 +@inproceedings{franken2018_cookiejar,
 +  author        = {Franken, Gertjan and Van Goethem, Tom and Joosen, Wouter},
 +  title         = {Who Left Open the Cookie Jar? A Comprehensive Evaluation of Third-Party Cookie Policies},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2018},
 +  series        = {USENIX Security 2018},
 +  url           = {https://www.usenix.org/conference/usenixsecurity18/presentation/franken},
 +}
 +
 +@inproceedings{patat2023_drm,
 +  author        = {Patat, Gwendal and Sabt, Mohamed and Fouque, Pierre-Alain},
 +  title         = {Your DRM Can Watch You Too: Exploring the Privacy Implications of Browsers (mis)Implementations of Widevine EME},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2023},
 +  series        = {PETS 2023},
 +  doi           = {10.56553/popets-2023-0112},
 +}
 +
 +@inproceedings{vekaria2025_bighelp,
 +  author        = {Vekaria, Yash and Canino, Aurelio Loris and Levitsky, Jonathan and Ciechonski, Alex and Callejo, Patricia and Mandalari, Anna Maria and Shafiq, Zubair},
 +  title         = {Big Help or Big Brother? Auditing Tracking, Profiling, and Personalization in Generative AI Assistants},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2025},
 +  series        = {USENIX Security 2025},
 +  url           = {https://www.usenix.org/conference/usenixsecurity25/presentation/vekaria},
 +}
 +
 +@inproceedings{wang2026_masks,
 +  author        = {Wang, Weihong and Dimova, Yana and Vansteenkiste, Victor and Van Goethem, Tom and Van Cutsem, Tom},
 +  title         = {The Masks We (Think We) Wear: Privacy Threats of Browser-Extension Wallets in the Web3 Ecosystem},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2026},
 +  series        = {PETS 2026},
 +  doi           = {10.56553/popets-2026-0094},
 } }
  
 </bibtex> </bibtex>
  
literature/bibliography.1787949565.txt.gz · Last modified: by karel.kubicek.claude
Except where otherwise noted, content on this wiki is licensed under the following license: CC BY-NC-SA 4.0
CC BY-NC-SA 4.0 Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki