Measure The Web

User Tools

Site Tools

Trace: • security • writing • design
literature:bibliography

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
literature:bibliography [2026/09/29 11:39] – Add ramakrishnan2026_crawling (IMC 2026, Crossref-verified). Authored by Claude karel.kubicek.claudeliterature:bibliography [2026/10/08 12:08] (current) – Add 2 entries for security:malicious_web_content (Shady Paths, Delta; added after review). Authored by Claude karel.kubicek.claude
Line 11104: Line 11104:
 } }
  
 +@inproceedings{chen2025_cross,
 +  author        = {Chen, Pinji and Chen, Jianjun and Zhang, Mingming and Wang, Qi and Zhang, Yiming and Xu, Mingwei and Duan, Haixin},
 +  title         = {Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2025},
 +  series        = {NDSS 2025},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/cross-origin-web-attacks-via-http-2-server-push-and-signed-http-exchange/},
 +}
 +
 +
 +@inproceedings{beadle2025_privacy,
 +  author = {Beadle, Kyle and Turk, Kieron Ivy and Eusebi, Aliai and Tran, Mindy and Ordekian, Marilyne and Mariconti, Enrico and Zou, Yixin and Vasek, Marie},
 +  title = {SoK: A Privacy Framework for Security Research Using Social Media Data},
 +  booktitle = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year = {2025},
 +  doi = {10.1109/sp61157.2025.00145},
 +}
 +@article{barbosa2019_privatechat,
 +  author = {Barbosa, Sérgio and Milan, Stefania},
 +  title = {Do Not Harm in Private Chat Apps: Ethical Issues for Research on and with WhatsApp},
 +  journal = {Westminster Papers in Communication and Culture},
 +  volume = {14}, number = {1}, pages = {49--65}, year = {2019},
 +  doi = {10.16997/wpcc.313},
 +}
 +@techreport{franzke2020_aoir,
 +  author = {franzke, aline shakti and Bechmann, Anja and Zimmer, Michael and Ess, Charles and {Association of Internet Researchers}},
 +  title = {Internet Research: Ethical Guidelines 3.0},
 +  institution = {Association of Internet Researchers}, year = {2020},
 +  url = {https://aoir.org/reports/ethics3.pdf},
 +}
 +
 +@inproceedings{leung2016_should,
 +  author        = {Leung, Christophe and Ren, Jingjing and Choffnes, David R. and Wilson, Christo},
 +  title         = {Should You Use the App for That?: Comparing the Privacy Implications of App- and Web-based Online Services},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2016},
 +  series        = {IMC 2016},
 +  doi           = {10.1145/2987443.2987456},
 +}
 +
 +@article{goldfeder2018_cookie,
 +  author        = {Goldfeder, Steven and Kalodner, Harry and Reisman, Dillon and Narayanan, Arvind},
 +  title         = {When the cookie meets the blockchain: Privacy risks of web payments via cryptocurrencies},
 +  journal       = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2018},
 +  series        = {PoPETs 2018},
 +  doi           = {10.1515/popets-2018-0038},
 +}
 +
 +@inproceedings{kafle2024_privacy,
 +  author        = {Kafle, Kaushal and Mandal, Prianka and Singh, Kapil and Andow, Benjamin and Nadkarni, Adwait},
 +  title         = {Understanding the Privacy Practices of Political Campaigns: A Perspective from the 2020 US Election Websites},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2024},
 +  series        = {IEEE S&P 2024},
 +  doi           = {10.1109/sp54263.2024.00091},
 +}
 +
 +@article{pradeep2025_gig,
 +  author        = {Pradeep, Amogh and Gunawan, Johanna and Feal, {\'A}lvaro and Hartzog, Woodrow and Choffnes, David},
 +  title         = {Gig Work at What Cost? Exploring Privacy Risks of Gig Work Platform Participation in the U.S.},
 +  journal       = {Proceedings on Privacy Enhancing Technologies},
 +  year          = {2025},
 +  series        = {PoPETs 2025},
 +  doi           = {10.56553/popets-2025-0027},
 +}
 +
 +@inproceedings{continella2017_obfuscation,
 +  author        = {Continella, Andrea and Fratantonio, Yanick and Lindorfer, Martina and Puccetti, Alessandro and Zand, Ali and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2017},
 +  series        = {NDSS 2017},
 +  doi           = {10.14722/ndss.2017.23465},
 +}
 +
 +@inproceedings{lin2020_fill,
 +  author        = {Lin, Xu and Ilia, Panagiotis and Polakis, Jason},
 +  title         = {Fill in the Blanks: Empirical Analysis of the Privacy Threats of Browser Form Autofill},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2020},
 +  series        = {CCS 2020},
 +  doi           = {10.1145/3372297.3417271},
 +}
 +
 +@inproceedings{krishnamurthy2011_privacy,
 +  author        = {Krishnamurthy, Balachander and Naryshkin, Konstantin and Wills, Craig E.},
 +  title         = {Privacy Leakage vs. Protection Measures: the Growing Disconnect},
 +  booktitle     = {Web 2.0 Security and Privacy Workshop (W2SP)},
 +  year          = {2011},
 +  series        = {W2SP 2011},
 +  url           = {http://web.cs.wpi.edu/~cew/papers/w2sp11.pdf},
 +}
 +
 +@article{libert2015_health,
 +  author        = {Libert, Timothy},
 +  title         = {Privacy Implications of Health Information Seeking on the Web},
 +  journal       = {Communications of the ACM},
 +  volume        = {58},
 +  number        = {3},
 +  pages         = {68--77},
 +  year          = {2015},
 +  doi           = {10.1145/2658983},
 +}
 +
 +@inproceedings{huo2022_alleyes,
 +  author        = {Huo, Mingjia and Bland, Maxwell and Levchenko, Kirill},
 +  title         = {All Eyes On Me: Inside Third Party Trackers' Exfiltration of PHI from Healthcare Providers' Online Systems},
 +  booktitle     = {Proceedings of the 21st Workshop on Privacy in the Electronic Society},
 +  year          = {2022},
 +  series        = {WPES 2022},
 +  doi           = {10.1145/3559613.3563190},
 +}
 +
 +@article{friedman2023_hospital,
 +  author        = {Friedman, Ari B. and Merchant, Raina M. and Maley, Amey and Farhat, Karim and Smith, Kristen and Felkins, Jackson and Gonzales, Rachel E. and Bauer, Lujo and McCoy, Matthew S.},
 +  title         = {Widespread Third-Party Tracking On Hospital Websites Poses Privacy Risks For Patients And Legal Liability For Hospitals},
 +  journal       = {Health Affairs},
 +  volume        = {42},
 +  number        = {4},
 +  year          = {2023},
 +  doi           = {10.1377/hlthaff.2022.01205},
 +}
 +
 +@inproceedings{dao2021_alternative,
 +  author        = {Dao, Ha and Fukuda, Kensuke},
 +  title         = {Alternative to Third-Party Cookies: Investigating Persistent PII Leakage-Based Web Tracking},
 +  booktitle     = {Proceedings of the 17th International Conference on emerging Networking EXperiments and Technologies},
 +  year          = {2021},
 +  series        = {CoNEXT 2021},
 +  doi           = {10.1145/3485983.3494860},
 +}
 +
 +@misc{cory2026_pii,
 +  author        = {Cory, Thomas and K{\"u}pper, Axel},
 +  title         = {Addressing Labelled Data Scarcity: Taxonomy-Agnostic Annotation of PII Values in HTTP Traffic using LLMs},
 +  year          = {2026},
 +  howpublished  = {arXiv:2605.06305},
 +  note          = {Accepted to the 2026 IEEE European Symposium on Security and Privacy Workshops (EuroS\&PW), per the arXiv record, checked 2026-10-08},
 +  url           = {https://arxiv.org/abs/2605.06305},
 +}
 +
 +@inproceedings{ghani2026_pixelconfig,
 +  author        = {Ghani, Abdullah and Vekaria, Yash and Shafiq, Zubair},
 +  title         = {PixelConfig: Longitudinal Measurement and Reverse-Engineering of Meta Pixel Configurations},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2026},
 +  series        = {IMC 2026},
 +  doi           = {10.1145/3777912.3809147},
 +}
 +@inproceedings{nelms2015_webwitness,
 +  author        = {Nelms, Terry and Perdisci, Roberto and Antonakakis, Manos and Ahamad, Mustaque},
 +  title         = {WebWitness: Investigating, Categorizing, and Mitigating Malware Download Paths},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2015},
 +  series        = {USENIX Security 2015},
 +  url           = {https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/nelms},
 +}
 +
 +@inproceedings{nelms2016_mitigating,
 +  author        = {Nelms, Terry and Perdisci, Roberto and Antonakakis, Manos and Ahamad, Mustaque},
 +  title         = {Towards Measuring and Mitigating Social Engineering Software Download Attacks},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2016},
 +  series        = {USENIX Security 2016},
 +  url           = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/nelms},
 +}
 +
 +@inproceedings{lu2010_blade,
 +  author        = {Lu, Long and Yegneswaran, Vinod and Porras, Phillip A. and Lee, Wenke},
 +  title         = {BLADE: an attack-agnostic approach for preventing drive-by malware infections},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2010},
 +  series        = {CCS 2010},
 +  doi           = {10.1145/1866307.1866356},
 +}
 +
 +@inproceedings{grier2012_manufacturing,
 +  author        = {Grier, Chris and Ballard, Lucas and Caballero, Juan and Chachra, Neha and Dietrich, Christian J. and Levchenko, Kirill and Mavrommatis, Panayiotis and McCoy, Damon and Nappa, Antonio and Pitsillidis, Andreas and Provos, Niels and Rafique, M. Zubair and Rajab, Moheeb Abu and Rossow, Christian and Thomas, Kurt and Paxson, Vern and Savage, Stefan and Voelker, Geoffrey M.},
 +  title         = {Manufacturing compromise: the emergence of exploit-as-a-service},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2012},
 +  series        = {CCS 2012},
 +  doi           = {10.1145/2382196.2382283},
 +}
 +
 +@inproceedings{invernizzi2012_evilseed,
 +  author        = {Invernizzi, Luca and Comparetti, Paolo Milani and Benvenuti, Stefano and Kruegel, Christopher and Cova, Marco and Vigna, Giovanni},
 +  title         = {EvilSeed: A Guided Approach to Finding Malicious Web Pages},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2012},
 +  series        = {IEEE S&P 2012},
 +  doi           = {10.1109/sp.2012.33},
 +}
 +
 +@inproceedings{kolbitsch2012_rozzle,
 +  author        = {Kolbitsch, Clemens and Livshits, Benjamin and Zorn, Benjamin G. and Seifert, Christian},
 +  title         = {Rozzle: De-cloaking Internet Malware},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2012},
 +  series        = {IEEE S&P 2012},
 +  doi           = {10.1109/sp.2012.48},
 +}
 +
 +@inproceedings{li2013_finding,
 +  author        = {Li, Zhou and Alrwais, Sumayah A. and Xie, Yinglian and Yu, Fang and Wang, XiaoFeng},
 +  title         = {Finding the Linchpins of the Dark Web: a Study on Topologically Dedicated Hosts on Malicious Web Infrastructures},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2013},
 +  series        = {IEEE S&P 2013},
 +  doi           = {10.1109/sp.2013.18},
 +}
 +
 +@inproceedings{nappa2014_cyberprobe,
 +  author        = {Nappa, Antonio and Xu, Zhaoyan and Rafique, M. Zubair and Caballero, Juan and Gu, Guofei},
 +  title         = {CyberProbe: Towards Internet-Scale Active Detection of Malicious Servers},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2014},
 +  series        = {NDSS 2014},
 +  url           = {https://www.ndss-symposium.org/ndss2014/ndss-2014-programme/cyberprobe-towards-internet-scale-active-detection-malicious-servers/},
 +}
 +
 +@inproceedings{cova2010_detection,
 +  author        = {Cova, Marco and Krügel, Christopher and Vigna, Giovanni},
 +  title         = {Detection and analysis of drive-by-download attacks and malicious JavaScript code},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2010},
 +  series        = {TheWebConf 2010},
 +  doi           = {10.1145/1772690.1772720},
 +}
 +
 +@inproceedings{liao2016_lurking,
 +  author        = {Liao, Xiaojing and Alrwais, Sumayah A. and Yuan, Kan and Xing, Luyi and Wang, XiaoFeng and Hao, Shuang and Beyah, Raheem A.},
 +  title         = {Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2016},
 +  series        = {CCS 2016},
 +  doi           = {10.1145/2976749.2978349},
 +}
 +
 +@inproceedings{li2014_hunting,
 +  author        = {Li, Zhou and Alrwais, Sumayah A. and Wang, XiaoFeng and Alowaisheq, Eihal},
 +  title         = {Hunting the Red Fox Online: Understanding and Detection of Mass Redirect-Script Injections},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2014},
 +  series        = {IEEE S&P 2014},
 +  doi           = {10.1109/sp.2014.8},
 +}
 +
 +@inproceedings{zhang2019_your,
 +  author        = {Zhang, Mingxue and Meng, Wei and Lee, Sangho and Lee, Byoungyoung and Xing, Xinyu},
 +  title         = {All Your Clicks Belong to Me: Investigating Click Interception on the Web},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2019},
 +  series        = {USENIX Security 2019},
 +  url           = {https://www.usenix.org/conference/usenixsecurity19/presentation/zhang},
 +}
 +
 +@inproceedings{kasturi2022_mistrust,
 +  author        = {Kasturi, Ranjita Pai and Fuller, Jonathan and Sun, Yiting and Chabklo, Omar and Rodriguez, Andres and Park, Jeman and Saltaformaggio, Brendan},
 +  title         = {Mistrust Plugins You Must: A Large-Scale Study Of Malicious Plugins In WordPress Marketplaces},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2022},
 +  series        = {USENIX Security 2022},
 +  url           = {https://www.usenix.org/conference/usenixsecurity22/presentation/kasturi},
 +}
 +
 +@inproceedings{li2012_knowing,
 +  author        = {Li, Zhou and Zhang, Kehuan and Xie, Yinglian and Yu, Fang and Wang, XiaoFeng},
 +  title         = {Knowing your enemy: understanding and detecting malicious web advertising},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2012},
 +  series        = {CCS 2012},
 +  doi           = {10.1145/2382196.2382267},
 +}
 +
 +@inproceedings{hong2018_shot,
 +  author        = {Hong, Geng and Yang, Zhemin and Yang, Sen and Zhang, Lei and Nan, Yuhong and Zhang, Zhibo and Yang, Min and Zhang, Yuan and Qian, Zhiyun and Duan, Hai-Xin},
 +  title         = {How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2018},
 +  series        = {CCS 2018},
 +  doi           = {10.1145/3243734.3243840},
 +}
 +
 +@inproceedings{naseem2021_minos,
 +  author        = {Naseem, Faraz and Aris, Ahmet and Babun, Leonardo and Tekiner, Ege and Uluagac, A. Selcuk},
 +  title         = {MINOS: A Lightweight Real-Time Cryptojacking Detection System},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2021},
 +  series        = {NDSS 2021},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/minos-a-lightweight-real-time-cryptojacking-detection-system/},
 +}
 +
 +@inproceedings{kharraz2019_outguard,
 +  author        = {Kharraz, Amin and Ma, Zane and Murley, Paul and Lever, Charles and Mason, Joshua and Miller, Andrew and Borisov, Nikita and Antonakakis, Manos and Bailey, Michael D.},
 +  title         = {Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2019},
 +  series        = {TheWebConf 2019},
 +  doi           = {10.1145/3308558.3313665},
 +}
 +
 +@inproceedings{hilbig2021_real,
 +  author        = {Hilbig, Aaron and Lehmann, Daniel and Pradel, Michael},
 +  title         = {An Empirical Study of Real-World WebAssembly Binaries: Security, Languages, Use Cases},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2021},
 +  series        = {TheWebConf 2021},
 +  doi           = {10.1145/3442381.3450138},
 +}
 +
 +@inproceedings{lu2011_surf,
 +  author        = {Lu, Long and Perdisci, Roberto and Lee, Wenke},
 +  title         = {SURF: detecting and measuring search poisoning},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2011},
 +  series        = {CCS 2011},
 +  doi           = {10.1145/2046707.2046762},
 +}
 +
 +@inproceedings{lim2023_longitudinal,
 +  author        = {Lim, Kyungchan and Kwon, Yonghwi and Kim, Doowon},
 +  title         = {A Longitudinal Study of Vulnerable Client-side Resources and Web Developers' Updating Behaviors},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2023},
 +  series        = {IMC 2023},
 +  doi           = {10.1145/3618257.3624804},
 +}
 +@inproceedings{stringhini2013_shady,
 +  author        = {Stringhini, Gianluca and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Shady paths: leveraging surfing crowds to detect malicious web pages},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2013},
 +  series        = {CCS 2013},
 +  doi           = {10.1145/2508859.2516682},
 +}
 +
 +@inproceedings{borgolte2013_delta,
 +  author        = {Borgolte, Kevin and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Delta: automatic identification of unknown web-based infection campaigns},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2013},
 +  series        = {CCS 2013},
 +  doi           = {10.1145/2508859.2516725},
 +}
 </bibtex> </bibtex>
  
literature/bibliography.1790681970.txt.gz · Last modified: by karel.kubicek.claude