Measure The Web

User Tools

Site Tools

Trace: • security • writing • design
literature:bibliography

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
literature:bibliography [2026/09/25 02:37] – Add 40 entries for security:domain_abuse (squatting, parking, expired domains, dangling DNS). Duplicate-checked with bib_dedup_scan.py (0 definite). Authored by Claude. karel.kubicek.claudeliterature:bibliography [2026/10/08 12:08] (current) – Add 2 entries for security:malicious_web_content (Shady Paths, Delta; added after review). Authored by Claude karel.kubicek.claude
Line 10601: Line 10601:
   series        = {USENIX Security 2025},   series        = {USENIX Security 2025},
   url           = {https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-mingming},   url           = {https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-mingming},
 +}
 +@inproceedings{roberts2019_impersonation,
 +  author        = {Roberts, Richard and Goldschlag, Yaelle and Walter, Rachel and Chung, Taejoong and Mislove, Alan and Levin, Dave},
 +  title         = {You Are Who You Appear to Be: A Longitudinal Study of Domain Impersonation in TLS Certificates},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2019},
 +  series        = {CCS 2019},
 +  doi           = {10.1145/3319535.3363188},
 +}
 +
 +@inproceedings{marjanov2026_stayin,
 +  author        = {Marjanov, Tina and Tsuchiya, Taro and Ioannidis, Konstantinos and Hughes, Jack and Christin, Nicolas and Hutchings, Alice},
 +  title         = {Stayin' Alive: How Global Stolen Data Markets Thrive on Telegram},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2026},
 +  series        = {USENIX Security 2026},
 +  url           = {https://www.usenix.org/conference/usenixsecurity26/presentation/marjanov},
 +}
 +
 +@inproceedings{gao2026_doxing,
 +  author        = {Gao, Yiran and Xia, Pengcheng and Wang, Liu and Liu, Tianming and Wang, Haoyu},
 +  title         = {Doxing-as-a-Service: Demystifying the Chinese Online Doxing Ecosystem},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2026},
 +  series        = {TheWebConf 2026},
 +  doi           = {10.1145/3774904.3792296},
 +}
 +
 +@inproceedings{xu2019_anatomy,
 +  author        = {Xu, Jiahua and Livshits, Benjamin},
 +  title         = {The Anatomy of a Cryptocurrency Pump-and-Dump Scheme},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2019},
 +  series        = {USENIX Security 2019},
 +  url           = {https://www.usenix.org/conference/usenixsecurity19/presentation/xu-jiahua},
 +}
 +
 +@inproceedings{sun2021_having,
 +  author        = {Sun, Zhibo and Oest, Adam and Zhang, Penghui and Rubio-Medrano, Carlos and Bao, Tiffany and Wang, Ruoyu and Zhao, Ziming and Shoshitaishvili, Yan and Doupé, Adam and Ahn, Gail-Joon},
 +  title         = {Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2021},
 +  series        = {USENIX Security 2021},
 +  url           = {https://www.usenix.org/conference/usenixsecurity21/presentation/sun-zhibo},
 +}
 +
 +@inproceedings{he2025_unmasking,
 +  author        = {He, Bowen and Hu, Yufeng and Chen, Zhuo and Chen, Yuan and Yu, Ting and Chang, Rui and Wu, Lei and Zhou, Yajin},
 +  title         = {Unmasking the Shadow Economy: A Deep Dive into Drainer-as-a-Service Phishing on Ethereum},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2025},
 +  series        = {IMC 2025},
 +  doi           = {10.1145/3730567.3764476},
 +}
 +
 +@inproceedings{weyns2026_mirai,
 +  author        = {Weyns, Maarten and Ferrero, Dario and Beek, Stefan Op de and Wagner, Daniel and Smaragdakis, Georgios and Griffioen, Harm},
 +  title         = {From Mirai to Gorilla: Deep Dive into a Long-Lasting DDoS-for-Hire Botnet},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2026},
 +  series        = {USENIX Security 2026},
 +  url           = {https://www.usenix.org/conference/usenixsecurity26/presentation/weyns},
 +}
 +
 +@inproceedings{acharya2025_pirates,
 +  author        = {Acharya, Bhupendra and Lazzaro, Dario and Cinà, Antonio Emanuele and Holz, Thorsten},
 +  title         = {Pirates of Charity: Exploring Donation-based Abuses in Social Media Platforms},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2025},
 +  series        = {TheWebConf 2025},
 +  doi           = {10.1145/3696410.3714634},
 +}
 +
 +@inproceedings{hoseini2020_demystifying,
 +  author        = {Hoseini, Mohamad and Melo, Philipe and Junior, Manoel and Benevenuto, Fabrício and Chandrasekaran, Balakrishnan and Feldmann, Anja and Zannettou, Savvas},
 +  title         = {Demystifying the Messaging Platforms' Ecosystem Through the Lens of Twitter},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2020},
 +  series        = {IMC 2020},
 +  doi           = {10.1145/3419394.3423651},
 +}
 +
 +@inproceedings{resende2019_information,
 +  author        = {Resende, Gustavo and Melo, Philipe F. and Sousa, Hugo and Messias, Johnnatan and Vasconcelos, Marisa and Almeida, Jussara M. and Benevenuto, Fabrício},
 +  title         = {(Mis)Information Dissemination in WhatsApp: Gathering, Analyzing and Countermeasures},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2019},
 +  series        = {TheWebConf 2019},
 +  doi           = {10.1145/3308558.3313688},
 +}
 +
 +@inproceedings{saha2021_short,
 +  author        = {Saha, Punyajoy and Mathew, Binny and Garimella, Kiran and Mukherjee, Animesh},
 +  title         = {"Short is the Road that Leads from Fear to Hate": Fear Speech in Indian WhatsApp Groups},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2021},
 +  series        = {TheWebConf 2021},
 +  doi           = {10.1145/3442381.3450137},
 +}
 +
 +@inproceedings{kireev2025_characterizing,
 +  author        = {Kireev, Klim and Mykhno, Yevhen and Troncoso, Carmela and Overdorf, Rebekah},
 +  title         = {Characterizing and Detecting Propaganda-Spreading Accounts on Telegram},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2025},
 +  series        = {USENIX Security 2025},
 +  url           = {https://www.usenix.org/conference/usenixsecurity25/presentation/kireev},
 +}
 +
 +@inproceedings{vu2024_easy,
 +  author        = {Vu, Anh V. and Hutchings, Alice and Anderson, Ross J.},
 +  title         = {No Easy Way Out: the Effectiveness of Deplatforming an Extremist Forum to Suppress Hate and Harassment},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2024},
 +  series        = {IEEE S&P 2024},
 +  doi           = {10.1109/sp54263.2024.00007},
 +}
 +
 +@inproceedings{vu2024_getting,
 +  author        = {Vu, Anh V. and Thomas, Daniel R. and Collier, Ben and Hutchings, Alice and Clayton, Richard and Anderson, Ross J.},
 +  title         = {Getting Bored of Cyberwar: Exploring the Role of Low-level Cybercrime Actors in the Russia-Ukraine Conflict},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2024},
 +  series        = {TheWebConf 2024},
 +  doi           = {10.1145/3589334.3645401},
 +}
 +
 +@inproceedings{vafa2025_learning,
 +  author        = {Vafa, Elham Pourabbas and Singhal, Mohit and Thota, Poojitha and Roy, Sayak Saha},
 +  title         = {Learning from Censored Experiences: Social Media Discussions around Censorship Circumvention Technologies},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2025},
 +  series        = {IEEE S&P 2025},
 +  doi           = {10.1109/sp61157.2025.00062},
 +}
 +
 +@inproceedings{recabarren2023_strategies,
 +  author        = {Recabarren, Ruben and Carbunar, Bogdan and Hernandez, Nestor and Shafin, Ashfaq Ali},
 +  title         = {Strategies and Vulnerabilities of Participants in Venezuelan Influence Operations},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2023},
 +  series        = {USENIX Security 2023},
 +  url           = {https://www.usenix.org/conference/usenixsecurity23/presentation/recabarren},
 +}
 +
 +@inproceedings{aliapoulios2021_characterization,
 +  author        = {Aliapoulios, Maxwell and Take, Kejsi and Ramakrishna, Prashanth and Borkan, Daniel and Goldberg, Beth and Sorensen, Jeffrey and Turner, Anna and Greenstadt, Rachel and Lauinger, Tobias and McCoy, Damon},
 +  title         = {A large-scale characterization of online incitements to harassment across platforms},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2021},
 +  series        = {IMC 2021},
 +  doi           = {10.1145/3487552.3487852},
 +}
 +
 +@inproceedings{bahramali2020_practical,
 +  author        = {Bahramali, Alireza and Houmansadr, Amir and Soltani, Ramin and Goeckel, Dennis and Towsley, Don},
 +  title         = {Practical Traffic Analysis Attacks on Secure Messaging Applications},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2020},
 +  series        = {NDSS 2020},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/practical-traffic-analysis-attacks-on-secure-messaging-applications/},
 +}
 +
 +@inproceedings{weerasinghe2020_people,
 +  author        = {Weerasinghe, Janith and Flanigan, Bailey and Stein, Aviel J. and McCoy, Damon and Greenstadt, Rachel},
 +  title         = {The Pod People: Understanding Manipulation of Social Media Popularity via Reciprocity Abuse},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2020},
 +  series        = {TheWebConf 2020},
 +  doi           = {10.1145/3366423.3380256},
 +}
 +
 +@inproceedings{shen2024_anything,
 +  author        = {Shen, Xinyue and Chen, Zeyuan and Backes, Michael and Shen, Yun and Zhang, Yang},
 +  title         = {"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2024},
 +  series        = {CCS 2024},
 +  doi           = {10.1145/3658644.3670388},
 +}
 +
 +@inproceedings{yu2024_listen,
 +  author        = {Yu, Zhiyuan and Liu, Xiaogeng and Liang, Shunning and Cameron, Zach and Xiao, Chaowei and Zhang, Ning},
 +  title         = {Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2024},
 +  series        = {USENIX Security 2024},
 +  url           = {https://www.usenix.org/conference/usenixsecurity24/presentation/yu-zhiyuan},
 +}
 +
 +@inproceedings{guo2024_moderating,
 +  author        = {Guo, Keyan and Utkarsh, Ayush and Ding, Wenbo and Ondracek, Isabelle and Zhao, Ziming and Freeman, Guo and Vishwamitra, Nishant and Hu, Hongxin},
 +  title         = {Moderating Illicit Online Image Promotion for Unsafe User Generated Content Games Using Large Vision-Language Models},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2024},
 +  series        = {USENIX Security 2024},
 +  url           = {https://www.usenix.org/conference/usenixsecurity24/presentation/guo-keyan},
 +}
 +
 +@inproceedings{schrittwieser2012_guess,
 +  author        = {Schrittwieser, Sebastian and Frühwirt, Peter and Kieseberg, Peter and Leithner, Manuel and Mulazzani, Martin and Huber, Markus and Weippl, Edgar},
 +  title         = {Guess Who’s Texting You? Evaluating the Security of Smartphone Messaging Applications},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2012},
 +  series        = {NDSS 2012},
 +  url           = {https://www.ndss-symposium.org/ndss2012/ndss-2012-programme/guess-whos-texting-you-evaluating-security-smartphone-messaging-applications/},
 +}
 +
 +@inproceedings{li2025_investigating,
 +  author        = {Li, Jiliang and Lu, Nora Sinong and Hanimann, Isaak and Si, Janice Jianing and Cheng, Dazhao and Zhou, Xiaobo and Wang, Kanye Ye},
 +  title         = {Investigating the Impact of Online Community Involvement on Safety Practices and Perceived Risks Among People Who Use Drugs},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2025},
 +  series        = {USENIX Security 2025},
 +  url           = {https://www.usenix.org/conference/usenixsecurity25/presentation/li-jiliang},
 +}
 +
 +@inproceedings{albrecht2021_collective,
 +  author        = {Albrecht, Martin R. and Blasco, Jorge and Jensen, Rikke Bjerg and Mareková, Lenka},
 +  title         = {Collective Information Security in Large-Scale Urban Protests: the Case of Hong Kong},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2021},
 +  series        = {USENIX Security 2021},
 +  url           = {https://www.usenix.org/conference/usenixsecurity21/presentation/albrecht},
 +}
 +
 +@inproceedings{arunasalam2024_security,
 +  author        = {Arunasalam, Arjun and Farrukh, Habiba and Tekcan, Eliz and Celik, Z. Berkay},
 +  title         = {Understanding the Security and Privacy Implications of Online Toxic Content on Refugees},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2024},
 +  series        = {USENIX Security 2024},
 +  url           = {https://www.usenix.org/conference/usenixsecurity24/presentation/arunasalam},
 +}
 +
 +@inproceedings{chou2025_bots,
 +  author        = {Chou, Kai-Hsiang and Lin, Yi-Min and Wang, Yi-An and Li, Jonathan Weiping and Kim, Tiffany Hyun-Jin and Hsiao, Hsu-Chun},
 +  title         = {Bots can Snoop: Uncovering and Mitigating Privacy Risks of Bots in Group Chats},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2025},
 +  series        = {USENIX Security 2025},
 +  url           = {https://www.usenix.org/conference/usenixsecurity25/presentation/chou},
 +}
 +
 +@inproceedings{wang2025_detecting,
 +  author        = {Wang, Hongyu and Li, Ying and Huang, Ronghong and Mi, Xianghang},
 +  title         = {Detecting and Understanding the Promotion of Illicit Goods and Services on Twitter},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2025},
 +  series        = {TheWebConf 2025},
 +  doi           = {10.1145/3696410.3714550},
 +}
 +@inproceedings{lu2020_demystifying,
 +  author        = {Lu, Haoran and Xing, Luyi and Xiao, Yue and Zhang, Yifan and Liao, Xiaojing and Wang, XiaoFeng and Wang, Xueqiang},
 +  title         = {Demystifying Resource Management Risks in Emerging Mobile App-in-App Ecosystems},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2020},
 +  series        = {CCS 2020},
 +  doi           = {10.1145/3372297.3417255},
 +}
 +
 +@inproceedings{yang2022_cross,
 +  author        = {Yang, Yuqing and Zhang, Yue and Lin, Zhiqiang},
 +  title         = {Cross Miniapp Request Forgery: Root Causes, Attacks, and Vulnerability Detection},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2022},
 +  series        = {CCS 2022},
 +  doi           = {10.1145/3548606.3560597},
 +}
 +
 +@inproceedings{zhang2022_identity,
 +  author        = {Zhang, Lei and Zhang, Zhibo and Liu, Ancong and Cao, Yinzhi and Zhang, Xiaohan and Chen, Yanjun and Zhang, Yuan and Yang, Guangliang and Yang, Min},
 +  title         = {Identity Confusion in WebView-based Mobile App-in-app Ecosystems},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2022},
 +  series        = {USENIX Security 2022},
 +  url           = {https://www.usenix.org/conference/usenixsecurity22/presentation/zhang-lei},
 +}
 +
 +@inproceedings{zhang2023_leak,
 +  author        = {Zhang, Yue and Yang, Yuqing and Lin, Zhiqiang},
 +  title         = {Don't Leak Your Keys: Understanding, Measuring, and Exploiting the AppSecret Leaks in Mini-Programs},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2023},
 +  series        = {CCS 2023},
 +  doi           = {10.1145/3576915.3616591},
 +}
 +
 +@inproceedings{wang2023_uncovering,
 +  author        = {Wang, Chao and Zhang, Yue and Lin, Zhiqiang},
 +  title         = {Uncovering and Exploiting Hidden APIs in Mobile Super Apps},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2023},
 +  series        = {CCS 2023},
 +  doi           = {10.1145/3576915.3616676},
 +}
 +
 +@inproceedings{wang2023_size,
 +  author        = {Wang, Chao and Zhang, Yue and Lin, Zhiqiang},
 +  title         = {One Size Does Not Fit All: Uncovering and Exploiting Cross Platform Discrepant APIs in WeChat},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2023},
 +  series        = {USENIX Security 2023},
 +  url           = {https://www.usenix.org/conference/usenixsecurity23/presentation/wang-chao},
 +}
 +
 +@inproceedings{zhang2024_minicat,
 +  author        = {Zhang, Zidong and Hou, Qinsheng and Ying, Lingyun and Diao, Wenrui and Gu, Yacong and Li, Rui and Guo, Shanqing and Duan, Haixin},
 +  title         = {MiniCAT: Understanding and Detecting Cross-Page Request Forgery Vulnerabilities in Mini-Programs},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2024},
 +  series        = {CCS 2024},
 +  doi           = {10.1145/3658644.3670294},
 +}
 +
 +@inproceedings{shi2026_better,
 +  author        = {Shi, Yizhe and Yang, Zhemin and Liu, Dingyi and Zhong, Kangwei and Dai, Jiarun and Yang, Min},
 +  title         = {Better Safe than Sorry: Uncovering the Insecure Resource Management in App-in-App Cloud Services},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2026},
 +  series        = {NDSS 2026},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/better-safe-than-sorry-uncovering-the-insecure-resource-management-in-app-in-app-cloud-services/},
 +}
 +
 +@inproceedings{cai2025_tell,
 +  author        = {Cai, Yifeng and Zhang, Ziqi and Yao, Mengyu and Liu, Junlin and Zhao, Xiaoke and Fu, Xinyi and Li, Ruoyu and Liu, Zhe and Chen, Xiangqun and Guo, Yao and Li, Ding},
 +  title         = {I Can Tell Your Secrets: Inferring Privacy Attributes from Mini-app Interaction History in Super-apps},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2025},
 +  series        = {USENIX Security 2025},
 +  url           = {https://www.usenix.org/conference/usenixsecurity25/presentation/cai-yifeng},
 +}
 +
 +@inproceedings{chen2026_minigames,
 +  author        = {Chen, Pei and Hong, Geng and Qin, Yicheng and Wang, Huazhe and Wu, Mengying and Yang, Min and Zhao, Ziru and Zhu, Yuanpeng and Su, Tao},
 +  title         = {When Fun Turns Toxic: A First Look at Aggressive Advertising in Mini-games},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2026},
 +  series        = {USENIX Security 2026},
 +  url           = {https://www.usenix.org/conference/usenixsecurity26/presentation/chen-pei},
 +}
 +
 +@inproceedings{yang2025_miniapp,
 +  author        = {Yang, Yuqing and Zhang, Yue and Lin, Zhiqiang},
 +  title         = {Understanding Miniapp Malware: Identification, Dissection, and Characterization},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2025},
 +  series        = {NDSS 2025},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/understanding-miniapp-malware-identification-dissection-and-characterization/},
 +}
 +
 +@inproceedings{shi2025_skeleton,
 +  author        = {Shi, Yizhe and Yang, Zhemin and Zhong, Kangwei and Yang, Guangliang and Yang, Yifan and Zhang, Xiaohan and Yang, Min},
 +  title         = {The Skeleton Keys: A Large Scale Analysis of Credential Leakage in Mini-apps},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2025},
 +  series        = {NDSS 2025},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/the-skeleton-keys-a-large-scale-analysis-of-credential-leakage-in-mini-apps/},
 +}
 +
 +@inproceedings{he2024_demystifying,
 +  author        = {He, Yi and Guan, Yunchao and Lun, Ruoyu and Song, Shangru and Guo, Zhihao and Zhuge, Jianwei and Chen, Jianjun and Wei, Qiang and Wu, Zehui and Yu, Miao and Shi, Hetian and Li, Qi},
 +  title         = {Demystifying the Security Implications in IoT Device Rental Services},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2024},
 +  series        = {USENIX Security 2024},
 +  url           = {https://www.usenix.org/conference/usenixsecurity24/presentation/he-yi},
 +}
 +
 +@inproceedings{liu2024_riotfuzzer,
 +  author        = {Liu, Kaizheng and Yang, Ming and Ling, Zhen and Zhang, Yue and Lei, Chongqing and Luo, Junzhou and Fu, Xinwen},
 +  title         = {RIoTFuzzer: Companion App Assisted Remote Fuzzing for Detecting Vulnerabilities in IoT Devices},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2024},
 +  series        = {CCS 2024},
 +  doi           = {10.1145/3658644.3670342},
 +}
 +
 +@inproceedings{lee2025_deep,
 +  author        = {Lee, Woonghee and Hur, Junbeom and Kwon, Hyunsoo},
 +  title         = {Deep Dive into In-app Browsers: Uncovering Hidden Pitfalls in Certificate Validation},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2025},
 +  series        = {CCS 2025},
 +  doi           = {10.1145/3719027.3765215},
 +}
 +
 +@inproceedings{wei2026_raising,
 +  author        = {Wei, Zhiao and Wang, Chao and Faheem, Haseeb-Ur-Rehman and Xing, Luyi and Aafer, Yousra and Lin, Zhiqiang},
 +  title         = {Raising the Flag: Detecting Missing Permission Controls in Mini-Program APIs},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2026},
 +  series        = {USENIX Security 2026},
 +  url           = {https://www.usenix.org/conference/usenixsecurity26/presentation/wei-zhiao},
 +}
 +
 +@inproceedings{shi2026_convenience,
 +  author        = {Shi, Yizhe and Yang, Zhemin and Yang, Yifan and Yang, Yunteng and Yang, Min},
 +  title         = {Convenience at a Cost: the Security Risks of Template-Based Development in the App-in-App Ecosystem},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2026},
 +  series        = {IEEE S\&P 2026},
 +  doi           = {10.1109/sp63933.2026.00074},
 +}
 +
 +@inproceedings{yang2026_real,
 +  author        = {Yang, Yuqing and Lin, Zhiqiang},
 +  title         = {Real or Rogue? Detecting Malicious Miniapps with Deceptive Reporting Interface},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2026},
 +  series        = {TheWebConf 2026},
 +  doi           = {10.1145/3774904.3792470},
 +}
 +
 +@inproceedings{wang2025_wechat,
 +  author        = {Wang, Mona and Lin, Pellaeon and Knockel, Jeffrey and Greenberg, Will and Mayer, Jonathan and Mittal, Prateek},
 +  title         = {What WeChat Knows: Pervasive First-Party Tracking in a Billion-User Super-App Ecosystem},
 +  booktitle     = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2025},
 +  series        = {PoPETs 2025},
 +  doi           = {10.56553/popets-2025-0163},
 +}
 +
 +@article{zhang2021_measurement,
 +  author        = {Zhang, Yue and Turkistani, Bayan and Yang, Allen Yuqing and Zuo, Chaoshun and Lin, Zhiqiang},
 +  title         = {A Measurement Study of {WeChat} Mini-Apps},
 +  journal       = {Proceedings of the ACM on Measurement and Analysis of Computing Systems},
 +  volume        = {5},
 +  number        = {2},
 +  year          = {2021},
 +  series        = {SIGMETRICS 2021},
 +  doi           = {10.1145/3460081},
 +}
 +
 +@inproceedings{baskaran2023_measuring,
 +  author        = {Baskaran, Supraja and Zhao, Lianying and Mannan, Mohammad and Youssef, Amr},
 +  title         = {Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The {WeChat} Case},
 +  booktitle     = {Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses},
 +  year          = {2023},
 +  series        = {RAID 2023},
 +  doi           = {10.1145/3607199.3607236},
 +}
 +
 +@inproceedings{wang2023_taintmini,
 +  author        = {Wang, Chao and Ko, Ronny and Zhang, Yue and Yang, Yuqing and Lin, Zhiqiang},
 +  title         = {{TaintMini}: Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis},
 +  booktitle     = {Proceedings of the 45th IEEE/ACM International Conference on Software Engineering},
 +  year          = {2023},
 +  series        = {ICSE 2023},
 +  doi           = {10.1109/ICSE48619.2023.00086},
 +}
 +
 +@inproceedings{meng2023_wemint,
 +  author        = {Meng, Shi and Wang, Liu and Wang, Shenao and Wang, Kailong and Xiao, Xusheng and Bai, Guangdong and Wang, Haoyu},
 +  title         = {{WeMinT}: Tainting Sensitive Data Leaks in {WeChat} Mini-Programs},
 +  booktitle     = {Proceedings of the 38th IEEE/ACM International Conference on Automated Software Engineering},
 +  year          = {2023},
 +  series        = {ASE 2023},
 +  doi           = {10.1109/ASE56229.2023.00151},
 +}
 +
 +@misc{yang2023_sok,
 +  author        = {Yang, Yuqing and Wang, Chao and Zhang, Yue and Lin, Zhiqiang},
 +  title         = {{SoK}: Decoding the Super App Enigma: The Security Mechanisms, Threats, and Trade-offs in {OS}-alike Apps},
 +  year          = {2023},
 +  howpublished  = {arXiv:2306.07495},
 +  url           = {https://arxiv.org/abs/2306.07495},
 +}
 +
 +@misc{zhang2026_oauth,
 +  author        = {Zhang, Zidong and Xie, Zhentao and Ying, Lingyun and Hou, Qinsheng and Gu, Yacong and Diao, Wenrui and Wu, Jianliang},
 +  title         = {Mini-Programs, Mega-Problems: Unveiling {OAuth}-based Authentication Misuses in Mini-Programs via Dynamic Analysis},
 +  year          = {2026},
 +  howpublished  = {arXiv:2607.08232, accepted at ACM CCS 2026},
 +  url           = {https://arxiv.org/abs/2607.08232},
 +}
 +
 +@misc{ciccotelli2026_tenet,
 +  author        = {Ciccotelli, Andrea and Zappone, Federico and Di Pietro, Roberto},
 +  title         = {{TENET}: Telegram Mini App (in)security},
 +  year          = {2026},
 +  howpublished  = {arXiv:2608.17538},
 +  url           = {https://arxiv.org/abs/2608.17538},
 +}
 +
 +@misc{ferrari2026_telegapper,
 +  author        = {Ferrari, Luca and Ceccato, Mariano and Verderame, Luca},
 +  title         = {{TeleGapper}: On the (un)reliability of Privacy Policies in Telegram Mini apps},
 +  year          = {2026},
 +  howpublished  = {arXiv:2608.13390},
 +  url           = {https://arxiv.org/abs/2608.13390},
 +}
 +
 +@inproceedings{ramakrishnan2026_crawling,
 +  author        = {Ramakrishnan, Karthik and Xie, Qinge and Anand, Uma and Li, Frank},
 +  title         = {Crawling in the Deep: Evaluating Web Crawling Configurations for Web Privacy Measurements},
 +  booktitle     = {Proceedings of the 2026 ACM Internet Measurement Conference},
 +  year          = {2026},
 +  series        = {IMC 2026},
 +  pages         = {374--388},
 +  doi           = {10.1145/3777912.3839794},
 +}
 +
 +@inproceedings{chen2025_cross,
 +  author        = {Chen, Pinji and Chen, Jianjun and Zhang, Mingming and Wang, Qi and Zhang, Yiming and Xu, Mingwei and Duan, Haixin},
 +  title         = {Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2025},
 +  series        = {NDSS 2025},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/cross-origin-web-attacks-via-http-2-server-push-and-signed-http-exchange/},
 +}
 +
 +
 +@inproceedings{beadle2025_privacy,
 +  author = {Beadle, Kyle and Turk, Kieron Ivy and Eusebi, Aliai and Tran, Mindy and Ordekian, Marilyne and Mariconti, Enrico and Zou, Yixin and Vasek, Marie},
 +  title = {SoK: A Privacy Framework for Security Research Using Social Media Data},
 +  booktitle = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year = {2025},
 +  doi = {10.1109/sp61157.2025.00145},
 +}
 +@article{barbosa2019_privatechat,
 +  author = {Barbosa, Sérgio and Milan, Stefania},
 +  title = {Do Not Harm in Private Chat Apps: Ethical Issues for Research on and with WhatsApp},
 +  journal = {Westminster Papers in Communication and Culture},
 +  volume = {14}, number = {1}, pages = {49--65}, year = {2019},
 +  doi = {10.16997/wpcc.313},
 +}
 +@techreport{franzke2020_aoir,
 +  author = {franzke, aline shakti and Bechmann, Anja and Zimmer, Michael and Ess, Charles and {Association of Internet Researchers}},
 +  title = {Internet Research: Ethical Guidelines 3.0},
 +  institution = {Association of Internet Researchers}, year = {2020},
 +  url = {https://aoir.org/reports/ethics3.pdf},
 +}
 +
 +@inproceedings{leung2016_should,
 +  author        = {Leung, Christophe and Ren, Jingjing and Choffnes, David R. and Wilson, Christo},
 +  title         = {Should You Use the App for That?: Comparing the Privacy Implications of App- and Web-based Online Services},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2016},
 +  series        = {IMC 2016},
 +  doi           = {10.1145/2987443.2987456},
 +}
 +
 +@article{goldfeder2018_cookie,
 +  author        = {Goldfeder, Steven and Kalodner, Harry and Reisman, Dillon and Narayanan, Arvind},
 +  title         = {When the cookie meets the blockchain: Privacy risks of web payments via cryptocurrencies},
 +  journal       = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2018},
 +  series        = {PoPETs 2018},
 +  doi           = {10.1515/popets-2018-0038},
 +}
 +
 +@inproceedings{kafle2024_privacy,
 +  author        = {Kafle, Kaushal and Mandal, Prianka and Singh, Kapil and Andow, Benjamin and Nadkarni, Adwait},
 +  title         = {Understanding the Privacy Practices of Political Campaigns: A Perspective from the 2020 US Election Websites},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2024},
 +  series        = {IEEE S&P 2024},
 +  doi           = {10.1109/sp54263.2024.00091},
 +}
 +
 +@article{pradeep2025_gig,
 +  author        = {Pradeep, Amogh and Gunawan, Johanna and Feal, {\'A}lvaro and Hartzog, Woodrow and Choffnes, David},
 +  title         = {Gig Work at What Cost? Exploring Privacy Risks of Gig Work Platform Participation in the U.S.},
 +  journal       = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2025},
 +  series        = {PoPETs 2025},
 +  doi           = {10.56553/popets-2025-0027},
 +}
 +
 +@inproceedings{continella2017_obfuscation,
 +  author        = {Continella, Andrea and Fratantonio, Yanick and Lindorfer, Martina and Puccetti, Alessandro and Zand, Ali and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2017},
 +  series        = {NDSS 2017},
 +  doi           = {10.14722/ndss.2017.23465},
 +}
 +
 +@inproceedings{lin2020_fill,
 +  author        = {Lin, Xu and Ilia, Panagiotis and Polakis, Jason},
 +  title         = {Fill in the Blanks: Empirical Analysis of the Privacy Threats of Browser Form Autofill},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2020},
 +  series        = {CCS 2020},
 +  doi           = {10.1145/3372297.3417271},
 +}
 +
 +@inproceedings{krishnamurthy2011_privacy,
 +  author        = {Krishnamurthy, Balachander and Naryshkin, Konstantin and Wills, Craig E.},
 +  title         = {Privacy Leakage vs. Protection Measures: the Growing Disconnect},
 +  booktitle     = {Web 2.0 Security and Privacy Workshop (W2SP)},
 +  year          = {2011},
 +  series        = {W2SP 2011},
 +  url           = {http://web.cs.wpi.edu/~cew/papers/w2sp11.pdf},
 +}
 +
 +@article{libert2015_health,
 +  author        = {Libert, Timothy},
 +  title         = {Privacy Implications of Health Information Seeking on the Web},
 +  journal       = {Communications of the ACM},
 +  volume        = {58},
 +  number        = {3},
 +  pages         = {68--77},
 +  year          = {2015},
 +  doi           = {10.1145/2658983},
 +}
 +
 +@inproceedings{huo2022_alleyes,
 +  author        = {Huo, Mingjia and Bland, Maxwell and Levchenko, Kirill},
 +  title         = {All Eyes On Me: Inside Third Party Trackers' Exfiltration of PHI from Healthcare Providers' Online Systems},
 +  booktitle     = {Proceedings of the 21st Workshop on Privacy in the Electronic Society},
 +  year          = {2022},
 +  series        = {WPES 2022},
 +  doi           = {10.1145/3559613.3563190},
 +}
 +
 +@article{friedman2023_hospital,
 +  author        = {Friedman, Ari B. and Merchant, Raina M. and Maley, Amey and Farhat, Karim and Smith, Kristen and Felkins, Jackson and Gonzales, Rachel E. and Bauer, Lujo and McCoy, Matthew S.},
 +  title         = {Widespread Third-Party Tracking On Hospital Websites Poses Privacy Risks For Patients And Legal Liability For Hospitals},
 +  journal       = {Health Affairs},
 +  volume        = {42},
 +  number        = {4},
 +  year          = {2023},
 +  doi           = {10.1377/hlthaff.2022.01205},
 +}
 +
 +@inproceedings{dao2021_alternative,
 +  author        = {Dao, Ha and Fukuda, Kensuke},
 +  title         = {Alternative to Third-Party Cookies: Investigating Persistent PII Leakage-Based Web Tracking},
 +  booktitle     = {Proceedings of the 17th International Conference on emerging Networking EXperiments and Technologies},
 +  year          = {2021},
 +  series        = {CoNEXT 2021},
 +  doi           = {10.1145/3485983.3494860},
 +}
 +
 +@misc{cory2026_pii,
 +  author        = {Cory, Thomas and K{\"u}pper, Axel},
 +  title         = {Addressing Labelled Data Scarcity: Taxonomy-Agnostic Annotation of PII Values in HTTP Traffic using LLMs},
 +  year          = {2026},
 +  howpublished  = {arXiv:2605.06305},
 +  note          = {Accepted to the 2026 IEEE European Symposium on Security and Privacy Workshops (EuroS\&PW), per the arXiv record, checked 2026-10-08},
 +  url           = {https://arxiv.org/abs/2605.06305},
 +}
 +
 +@inproceedings{ghani2026_pixelconfig,
 +  author        = {Ghani, Abdullah and Vekaria, Yash and Shafiq, Zubair},
 +  title         = {PixelConfig: Longitudinal Measurement and Reverse-Engineering of Meta Pixel Configurations},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2026},
 +  series        = {IMC 2026},
 +  doi           = {10.1145/3777912.3809147},
 +}
 +@inproceedings{nelms2015_webwitness,
 +  author        = {Nelms, Terry and Perdisci, Roberto and Antonakakis, Manos and Ahamad, Mustaque},
 +  title         = {WebWitness: Investigating, Categorizing, and Mitigating Malware Download Paths},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2015},
 +  series        = {USENIX Security 2015},
 +  url           = {https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/nelms},
 +}
 +
 +@inproceedings{nelms2016_mitigating,
 +  author        = {Nelms, Terry and Perdisci, Roberto and Antonakakis, Manos and Ahamad, Mustaque},
 +  title         = {Towards Measuring and Mitigating Social Engineering Software Download Attacks},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2016},
 +  series        = {USENIX Security 2016},
 +  url           = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/nelms},
 +}
 +
 +@inproceedings{lu2010_blade,
 +  author        = {Lu, Long and Yegneswaran, Vinod and Porras, Phillip A. and Lee, Wenke},
 +  title         = {BLADE: an attack-agnostic approach for preventing drive-by malware infections},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2010},
 +  series        = {CCS 2010},
 +  doi           = {10.1145/1866307.1866356},
 +}
 +
 +@inproceedings{grier2012_manufacturing,
 +  author        = {Grier, Chris and Ballard, Lucas and Caballero, Juan and Chachra, Neha and Dietrich, Christian J. and Levchenko, Kirill and Mavrommatis, Panayiotis and McCoy, Damon and Nappa, Antonio and Pitsillidis, Andreas and Provos, Niels and Rafique, M. Zubair and Rajab, Moheeb Abu and Rossow, Christian and Thomas, Kurt and Paxson, Vern and Savage, Stefan and Voelker, Geoffrey M.},
 +  title         = {Manufacturing compromise: the emergence of exploit-as-a-service},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2012},
 +  series        = {CCS 2012},
 +  doi           = {10.1145/2382196.2382283},
 +}
 +
 +@inproceedings{invernizzi2012_evilseed,
 +  author        = {Invernizzi, Luca and Comparetti, Paolo Milani and Benvenuti, Stefano and Kruegel, Christopher and Cova, Marco and Vigna, Giovanni},
 +  title         = {EvilSeed: A Guided Approach to Finding Malicious Web Pages},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2012},
 +  series        = {IEEE S&P 2012},
 +  doi           = {10.1109/sp.2012.33},
 +}
 +
 +@inproceedings{kolbitsch2012_rozzle,
 +  author        = {Kolbitsch, Clemens and Livshits, Benjamin and Zorn, Benjamin G. and Seifert, Christian},
 +  title         = {Rozzle: De-cloaking Internet Malware},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2012},
 +  series        = {IEEE S&P 2012},
 +  doi           = {10.1109/sp.2012.48},
 +}
 +
 +@inproceedings{li2013_finding,
 +  author        = {Li, Zhou and Alrwais, Sumayah A. and Xie, Yinglian and Yu, Fang and Wang, XiaoFeng},
 +  title         = {Finding the Linchpins of the Dark Web: a Study on Topologically Dedicated Hosts on Malicious Web Infrastructures},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2013},
 +  series        = {IEEE S&P 2013},
 +  doi           = {10.1109/sp.2013.18},
 +}
 +
 +@inproceedings{nappa2014_cyberprobe,
 +  author        = {Nappa, Antonio and Xu, Zhaoyan and Rafique, M. Zubair and Caballero, Juan and Gu, Guofei},
 +  title         = {CyberProbe: Towards Internet-Scale Active Detection of Malicious Servers},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2014},
 +  series        = {NDSS 2014},
 +  url           = {https://www.ndss-symposium.org/ndss2014/ndss-2014-programme/cyberprobe-towards-internet-scale-active-detection-malicious-servers/},
 +}
 +
 +@inproceedings{cova2010_detection,
 +  author        = {Cova, Marco and Krügel, Christopher and Vigna, Giovanni},
 +  title         = {Detection and analysis of drive-by-download attacks and malicious JavaScript code},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2010},
 +  series        = {TheWebConf 2010},
 +  doi           = {10.1145/1772690.1772720},
 +}
 +
 +@inproceedings{liao2016_lurking,
 +  author        = {Liao, Xiaojing and Alrwais, Sumayah A. and Yuan, Kan and Xing, Luyi and Wang, XiaoFeng and Hao, Shuang and Beyah, Raheem A.},
 +  title         = {Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2016},
 +  series        = {CCS 2016},
 +  doi           = {10.1145/2976749.2978349},
 +}
 +
 +@inproceedings{li2014_hunting,
 +  author        = {Li, Zhou and Alrwais, Sumayah A. and Wang, XiaoFeng and Alowaisheq, Eihal},
 +  title         = {Hunting the Red Fox Online: Understanding and Detection of Mass Redirect-Script Injections},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2014},
 +  series        = {IEEE S&P 2014},
 +  doi           = {10.1109/sp.2014.8},
 +}
 +
 +@inproceedings{zhang2019_your,
 +  author        = {Zhang, Mingxue and Meng, Wei and Lee, Sangho and Lee, Byoungyoung and Xing, Xinyu},
 +  title         = {All Your Clicks Belong to Me: Investigating Click Interception on the Web},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2019},
 +  series        = {USENIX Security 2019},
 +  url           = {https://www.usenix.org/conference/usenixsecurity19/presentation/zhang},
 +}
 +
 +@inproceedings{kasturi2022_mistrust,
 +  author        = {Kasturi, Ranjita Pai and Fuller, Jonathan and Sun, Yiting and Chabklo, Omar and Rodriguez, Andres and Park, Jeman and Saltaformaggio, Brendan},
 +  title         = {Mistrust Plugins You Must: A Large-Scale Study Of Malicious Plugins In WordPress Marketplaces},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2022},
 +  series        = {USENIX Security 2022},
 +  url           = {https://www.usenix.org/conference/usenixsecurity22/presentation/kasturi},
 +}
 +
 +@inproceedings{li2012_knowing,
 +  author        = {Li, Zhou and Zhang, Kehuan and Xie, Yinglian and Yu, Fang and Wang, XiaoFeng},
 +  title         = {Knowing your enemy: understanding and detecting malicious web advertising},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2012},
 +  series        = {CCS 2012},
 +  doi           = {10.1145/2382196.2382267},
 +}
 +
 +@inproceedings{hong2018_shot,
 +  author        = {Hong, Geng and Yang, Zhemin and Yang, Sen and Zhang, Lei and Nan, Yuhong and Zhang, Zhibo and Yang, Min and Zhang, Yuan and Qian, Zhiyun and Duan, Hai-Xin},
 +  title         = {How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2018},
 +  series        = {CCS 2018},
 +  doi           = {10.1145/3243734.3243840},
 +}
 +
 +@inproceedings{naseem2021_minos,
 +  author        = {Naseem, Faraz and Aris, Ahmet and Babun, Leonardo and Tekiner, Ege and Uluagac, A. Selcuk},
 +  title         = {MINOS: A Lightweight Real-Time Cryptojacking Detection System},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2021},
 +  series        = {NDSS 2021},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/minos-a-lightweight-real-time-cryptojacking-detection-system/},
 +}
 +
 +@inproceedings{kharraz2019_outguard,
 +  author        = {Kharraz, Amin and Ma, Zane and Murley, Paul and Lever, Charles and Mason, Joshua and Miller, Andrew and Borisov, Nikita and Antonakakis, Manos and Bailey, Michael D.},
 +  title         = {Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2019},
 +  series        = {TheWebConf 2019},
 +  doi           = {10.1145/3308558.3313665},
 +}
 +
 +@inproceedings{hilbig2021_real,
 +  author        = {Hilbig, Aaron and Lehmann, Daniel and Pradel, Michael},
 +  title         = {An Empirical Study of Real-World WebAssembly Binaries: Security, Languages, Use Cases},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2021},
 +  series        = {TheWebConf 2021},
 +  doi           = {10.1145/3442381.3450138},
 +}
 +
 +@inproceedings{lu2011_surf,
 +  author        = {Lu, Long and Perdisci, Roberto and Lee, Wenke},
 +  title         = {SURF: detecting and measuring search poisoning},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2011},
 +  series        = {CCS 2011},
 +  doi           = {10.1145/2046707.2046762},
 +}
 +
 +@inproceedings{lim2023_longitudinal,
 +  author        = {Lim, Kyungchan and Kwon, Yonghwi and Kim, Doowon},
 +  title         = {A Longitudinal Study of Vulnerable Client-side Resources and Web Developers' Updating Behaviors},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2023},
 +  series        = {IMC 2023},
 +  doi           = {10.1145/3618257.3624804},
 +}
 +@inproceedings{stringhini2013_shady,
 +  author        = {Stringhini, Gianluca and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Shady paths: leveraging surfing crowds to detect malicious web pages},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2013},
 +  series        = {CCS 2013},
 +  doi           = {10.1145/2508859.2516682},
 +}
 +
 +@inproceedings{borgolte2013_delta,
 +  author        = {Borgolte, Kevin and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Delta: automatic identification of unknown web-based infection campaigns},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2013},
 +  series        = {CCS 2013},
 +  doi           = {10.1145/2508859.2516725},
 } }
 </bibtex> </bibtex>
literature/bibliography.1790303826.txt.gz · Last modified: by karel.kubicek.claude