Measure The Web

User Tools

Site Tools

Trace: • security • writing • design
literature:bibliography

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
literature:bibliography [2026/10/08 11:54] – Add 13 entries for privacy:pii_leakage (5 corpus papers, 1 corpus method paper, 7 outside the extraction). Authored by Claude. karel.kubicek.claudeliterature:bibliography [2026/10/08 12:08] (current) – Add 2 entries for security:malicious_web_content (Shady Paths, Delta; added after review). Authored by Claude karel.kubicek.claude
Line 11253: Line 11253:
   series        = {IMC 2026},   series        = {IMC 2026},
   doi           = {10.1145/3777912.3809147},   doi           = {10.1145/3777912.3809147},
 +}
 +@inproceedings{nelms2015_webwitness,
 +  author        = {Nelms, Terry and Perdisci, Roberto and Antonakakis, Manos and Ahamad, Mustaque},
 +  title         = {WebWitness: Investigating, Categorizing, and Mitigating Malware Download Paths},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2015},
 +  series        = {USENIX Security 2015},
 +  url           = {https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/nelms},
 +}
 +
 +@inproceedings{nelms2016_mitigating,
 +  author        = {Nelms, Terry and Perdisci, Roberto and Antonakakis, Manos and Ahamad, Mustaque},
 +  title         = {Towards Measuring and Mitigating Social Engineering Software Download Attacks},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2016},
 +  series        = {USENIX Security 2016},
 +  url           = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/nelms},
 +}
 +
 +@inproceedings{lu2010_blade,
 +  author        = {Lu, Long and Yegneswaran, Vinod and Porras, Phillip A. and Lee, Wenke},
 +  title         = {BLADE: an attack-agnostic approach for preventing drive-by malware infections},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2010},
 +  series        = {CCS 2010},
 +  doi           = {10.1145/1866307.1866356},
 +}
 +
 +@inproceedings{grier2012_manufacturing,
 +  author        = {Grier, Chris and Ballard, Lucas and Caballero, Juan and Chachra, Neha and Dietrich, Christian J. and Levchenko, Kirill and Mavrommatis, Panayiotis and McCoy, Damon and Nappa, Antonio and Pitsillidis, Andreas and Provos, Niels and Rafique, M. Zubair and Rajab, Moheeb Abu and Rossow, Christian and Thomas, Kurt and Paxson, Vern and Savage, Stefan and Voelker, Geoffrey M.},
 +  title         = {Manufacturing compromise: the emergence of exploit-as-a-service},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2012},
 +  series        = {CCS 2012},
 +  doi           = {10.1145/2382196.2382283},
 +}
 +
 +@inproceedings{invernizzi2012_evilseed,
 +  author        = {Invernizzi, Luca and Comparetti, Paolo Milani and Benvenuti, Stefano and Kruegel, Christopher and Cova, Marco and Vigna, Giovanni},
 +  title         = {EvilSeed: A Guided Approach to Finding Malicious Web Pages},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2012},
 +  series        = {IEEE S&P 2012},
 +  doi           = {10.1109/sp.2012.33},
 +}
 +
 +@inproceedings{kolbitsch2012_rozzle,
 +  author        = {Kolbitsch, Clemens and Livshits, Benjamin and Zorn, Benjamin G. and Seifert, Christian},
 +  title         = {Rozzle: De-cloaking Internet Malware},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2012},
 +  series        = {IEEE S&P 2012},
 +  doi           = {10.1109/sp.2012.48},
 +}
 +
 +@inproceedings{li2013_finding,
 +  author        = {Li, Zhou and Alrwais, Sumayah A. and Xie, Yinglian and Yu, Fang and Wang, XiaoFeng},
 +  title         = {Finding the Linchpins of the Dark Web: a Study on Topologically Dedicated Hosts on Malicious Web Infrastructures},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2013},
 +  series        = {IEEE S&P 2013},
 +  doi           = {10.1109/sp.2013.18},
 +}
 +
 +@inproceedings{nappa2014_cyberprobe,
 +  author        = {Nappa, Antonio and Xu, Zhaoyan and Rafique, M. Zubair and Caballero, Juan and Gu, Guofei},
 +  title         = {CyberProbe: Towards Internet-Scale Active Detection of Malicious Servers},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2014},
 +  series        = {NDSS 2014},
 +  url           = {https://www.ndss-symposium.org/ndss2014/ndss-2014-programme/cyberprobe-towards-internet-scale-active-detection-malicious-servers/},
 +}
 +
 +@inproceedings{cova2010_detection,
 +  author        = {Cova, Marco and Krügel, Christopher and Vigna, Giovanni},
 +  title         = {Detection and analysis of drive-by-download attacks and malicious JavaScript code},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2010},
 +  series        = {TheWebConf 2010},
 +  doi           = {10.1145/1772690.1772720},
 +}
 +
 +@inproceedings{liao2016_lurking,
 +  author        = {Liao, Xiaojing and Alrwais, Sumayah A. and Yuan, Kan and Xing, Luyi and Wang, XiaoFeng and Hao, Shuang and Beyah, Raheem A.},
 +  title         = {Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2016},
 +  series        = {CCS 2016},
 +  doi           = {10.1145/2976749.2978349},
 +}
 +
 +@inproceedings{li2014_hunting,
 +  author        = {Li, Zhou and Alrwais, Sumayah A. and Wang, XiaoFeng and Alowaisheq, Eihal},
 +  title         = {Hunting the Red Fox Online: Understanding and Detection of Mass Redirect-Script Injections},
 +  booktitle     = {Proceedings of the IEEE Symposium on Security and Privacy},
 +  year          = {2014},
 +  series        = {IEEE S&P 2014},
 +  doi           = {10.1109/sp.2014.8},
 +}
 +
 +@inproceedings{zhang2019_your,
 +  author        = {Zhang, Mingxue and Meng, Wei and Lee, Sangho and Lee, Byoungyoung and Xing, Xinyu},
 +  title         = {All Your Clicks Belong to Me: Investigating Click Interception on the Web},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2019},
 +  series        = {USENIX Security 2019},
 +  url           = {https://www.usenix.org/conference/usenixsecurity19/presentation/zhang},
 +}
 +
 +@inproceedings{kasturi2022_mistrust,
 +  author        = {Kasturi, Ranjita Pai and Fuller, Jonathan and Sun, Yiting and Chabklo, Omar and Rodriguez, Andres and Park, Jeman and Saltaformaggio, Brendan},
 +  title         = {Mistrust Plugins You Must: A Large-Scale Study Of Malicious Plugins In WordPress Marketplaces},
 +  booktitle     = {Proceedings of the USENIX Security Symposium},
 +  year          = {2022},
 +  series        = {USENIX Security 2022},
 +  url           = {https://www.usenix.org/conference/usenixsecurity22/presentation/kasturi},
 +}
 +
 +@inproceedings{li2012_knowing,
 +  author        = {Li, Zhou and Zhang, Kehuan and Xie, Yinglian and Yu, Fang and Wang, XiaoFeng},
 +  title         = {Knowing your enemy: understanding and detecting malicious web advertising},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2012},
 +  series        = {CCS 2012},
 +  doi           = {10.1145/2382196.2382267},
 +}
 +
 +@inproceedings{hong2018_shot,
 +  author        = {Hong, Geng and Yang, Zhemin and Yang, Sen and Zhang, Lei and Nan, Yuhong and Zhang, Zhibo and Yang, Min and Zhang, Yuan and Qian, Zhiyun and Duan, Hai-Xin},
 +  title         = {How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2018},
 +  series        = {CCS 2018},
 +  doi           = {10.1145/3243734.3243840},
 +}
 +
 +@inproceedings{naseem2021_minos,
 +  author        = {Naseem, Faraz and Aris, Ahmet and Babun, Leonardo and Tekiner, Ege and Uluagac, A. Selcuk},
 +  title         = {MINOS: A Lightweight Real-Time Cryptojacking Detection System},
 +  booktitle     = {Proceedings of the Network and Distributed System Security Symposium},
 +  year          = {2021},
 +  series        = {NDSS 2021},
 +  url           = {https://www.ndss-symposium.org/ndss-paper/minos-a-lightweight-real-time-cryptojacking-detection-system/},
 +}
 +
 +@inproceedings{kharraz2019_outguard,
 +  author        = {Kharraz, Amin and Ma, Zane and Murley, Paul and Lever, Charles and Mason, Joshua and Miller, Andrew and Borisov, Nikita and Antonakakis, Manos and Bailey, Michael D.},
 +  title         = {Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2019},
 +  series        = {TheWebConf 2019},
 +  doi           = {10.1145/3308558.3313665},
 +}
 +
 +@inproceedings{hilbig2021_real,
 +  author        = {Hilbig, Aaron and Lehmann, Daniel and Pradel, Michael},
 +  title         = {An Empirical Study of Real-World WebAssembly Binaries: Security, Languages, Use Cases},
 +  booktitle     = {Proceedings of the ACM Web Conference},
 +  year          = {2021},
 +  series        = {TheWebConf 2021},
 +  doi           = {10.1145/3442381.3450138},
 +}
 +
 +@inproceedings{lu2011_surf,
 +  author        = {Lu, Long and Perdisci, Roberto and Lee, Wenke},
 +  title         = {SURF: detecting and measuring search poisoning},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2011},
 +  series        = {CCS 2011},
 +  doi           = {10.1145/2046707.2046762},
 +}
 +
 +@inproceedings{lim2023_longitudinal,
 +  author        = {Lim, Kyungchan and Kwon, Yonghwi and Kim, Doowon},
 +  title         = {A Longitudinal Study of Vulnerable Client-side Resources and Web Developers' Updating Behaviors},
 +  booktitle     = {Proceedings of the ACM Internet Measurement Conference},
 +  year          = {2023},
 +  series        = {IMC 2023},
 +  doi           = {10.1145/3618257.3624804},
 +}
 +@inproceedings{stringhini2013_shady,
 +  author        = {Stringhini, Gianluca and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Shady paths: leveraging surfing crowds to detect malicious web pages},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2013},
 +  series        = {CCS 2013},
 +  doi           = {10.1145/2508859.2516682},
 +}
 +
 +@inproceedings{borgolte2013_delta,
 +  author        = {Borgolte, Kevin and Kruegel, Christopher and Vigna, Giovanni},
 +  title         = {Delta: automatic identification of unknown web-based infection campaigns},
 +  booktitle     = {Proceedings of the ACM SIGSAC Conference on Computer and Communications Security},
 +  year          = {2013},
 +  series        = {CCS 2013},
 +  doi           = {10.1145/2508859.2516725},
 } }
 </bibtex> </bibtex>
literature/bibliography.1791460488.txt.gz · Last modified: by karel.kubicek.claude