{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,12]],"date-time":"2026-09-12T01:59:08Z","timestamp":1789178348715,"version":"build-2803163510"},"publisher-location":"Cham","reference-count":50,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030299613","type":"print"},{"value":"9783030299620","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-29962-0_26","type":"book-chapter","created":{"date-parts":[[2019,9,14]],"date-time":"2019-09-14T23:03:29Z","timestamp":1568502209000},"page":"545-564","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["The Risks of WebGL: Analysis, Evaluation and Detection"],"prefix":"10.1007","author":[{"given":"Alex","family":"Belkin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nethanel","family":"Gelernter","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Israel","family":"Cidon","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,9,15]]},"reference":[{"key":"26_CR1","unstructured":"AdBlock Extension. https:\/\/getadblock.com\/"},{"key":"26_CR2","unstructured":"Coinhive \u2013 Monero JavaScript Mining. https:\/\/coinhive.com\/"},{"key":"26_CR3","unstructured":"CryptoNote - the next generation cryptocurrency. https:\/\/cryptonote.org\/"},{"key":"26_CR4","unstructured":"Keccak Team. https:\/\/keccak.team\/keccak.html"},{"key":"26_CR5","unstructured":"MongoDB. https:\/\/www.mongodb.com\/"},{"key":"26_CR6","unstructured":"Node.js. https:\/\/nodejs.org"},{"key":"26_CR7","unstructured":"The Skein Hash Function Family. http:\/\/www.skein-hash.info\/"},{"key":"26_CR8","unstructured":"WebAssembly High-Level Goals. https:\/\/github.com\/WebAssembly\/design\/blob\/master\/HighLevelGoals.md"},{"key":"26_CR9","unstructured":"Home\u2014Monero - secure, private, untraceable (2014). https:\/\/getmonero.org\/"},{"issue":"5","key":"26_CR10","first-page":"154","volume":"28","author":"DA Alcantara","year":"2009","unstructured":"Alcantara, D.A., et al.: Real-time parallel hashing on the GPU. ACM Trans. Grap. (TOG) 28(5), 154 (2009)","journal-title":"ACM Trans. Grap. (TOG)"},{"key":"26_CR11","doi-asserted-by":"crossref","unstructured":"Belkin, A., Gelernter, N., Cidon, I.: The risks of WebGL: analysis, evaluation and detection (2019). https:\/\/arxiv.org\/abs\/1904.13071","DOI":"10.1007\/978-3-030-29962-0_26"},{"key":"26_CR12","unstructured":"Blanchou, M.: Harnessing GPUs building better browser based botnets. Black Hat Europe (2013)"},{"key":"26_CR13","unstructured":"Blockgeeks: What Is Hashing? Under the Hood of Blockchain (2017). https:\/\/blockgeeks.com\/guides\/what-is-hashing\/"},{"key":"26_CR14","unstructured":"Dorsey, B.: Browser as botnet, or the coming war on your web browser (2018). https:\/\/medium.com\/@brannondorsey\/browser-as-botnet-or-the-coming-war-on-your-web-browser-be920c4f718"},{"key":"26_CR15","unstructured":"Krebs, B.: Who and What Is Coinhive? (2018). https:\/\/krebsonsecurity.com\/2018\/03\/who-and-what-is-coinhive\/"},{"key":"26_CR16","unstructured":"Check Point Research Team: Crypto Miners - The Silent CPU Killer of 2017 (2017). https:\/\/blog.checkpoint.com\/2017\/10\/23\/crypto-miners-the-silent-cpu-killer-of-2017"},{"key":"26_CR17","unstructured":"CryptoNote: CryptoNight Hash Function (2013). https:\/\/cryptonote.org\/cns\/cns008.txt"},{"key":"26_CR18","unstructured":"Jackson, D.: WebGL 1.0 specification, October 2014. https:\/\/www.khronos.org\/registry\/webgl\/specs\/1.0\/"},{"key":"26_CR19","unstructured":"Jackson, D., Gilbert, J.: WebGL 2.0 specification, November 2016. https:\/\/www.khronos.org\/registry\/webgl\/specs\/latest\/2.0\/"},{"key":"26_CR20","unstructured":"G\u00f3mez, E.: Monero (XMR) on the rise following its inclusion in the darknet market AlphaBay (2016). https:\/\/themerkle.com\/monero-xmr-on-the-rise-following-its-inclusion-in-the-darknet-market-alphabay\/"},{"key":"26_CR21","unstructured":"Erkkil\u00e4, J.P.: Websocket security analysis, pp. 2\u20133. Aalto University School of Science (2012)"},{"key":"26_CR22","unstructured":"Federal Information Processing Standards Publication 197, NIST: Announcing the Advanced Encryption Standard (2001). http:\/\/nvlpubs.nist.gov\/nistpubs\/FIPS\/NIST.FIPS.197.pdf"},{"key":"26_CR23","doi-asserted-by":"crossref","unstructured":"Gelernter, N., Grinstein, Y., Herzberg, A.: Cross-site framing attacks. In: Proceedings of the 31st Annual Computer Security Applications Conference, pp. 161\u2013170. ACM (2015)","DOI":"10.1145\/2818000.2818029"},{"key":"26_CR24","unstructured":"Goethem, T.V., Vanhoef, M., Piessens, F., Joosen, W.: Request and conquer: exposing cross-origin resource size. In: 25th USENIX Security Symposium (USENIX Security 2016), Austin, TX, USA, pp. 447\u2013462, August 2016"},{"key":"26_CR25","unstructured":"Groestl Team: Hash function Groestl - SHA-3 candidate. http:\/\/www.groestl.info\/"},{"key":"26_CR26","doi-asserted-by":"crossref","unstructured":"Hong, G., et al.: How you get shot in the back: a systematical study about cryptojacking in the real world (2018)","DOI":"10.1145\/3243734.3243840"},{"key":"26_CR27","unstructured":"Wu, H.: Hash Function JH. http:\/\/www3.ntu.edu.sg\/home\/wuhj\/research\/jh\/index.html"},{"key":"26_CR28","doi-asserted-by":"crossref","unstructured":"R\u00fcth, J., Zimmermann, T., Wolsing, K., Hohlfeld, O.: Digging into browser-based crypto mining (2018)","DOI":"10.1145\/3278532.3278539"},{"key":"26_CR29","unstructured":"Grunzweig, J.: The rise of the cryptocurrency miners (2018). https:\/\/researchcenter.paloaltonetworks.com\/2018\/06\/unit42-rise-cryptocurrency-miners\/"},{"key":"26_CR30","unstructured":"JP Buntinx: The early history of Monero in 500 words (2017). https:\/\/themerkle.com\/the-early-history-of-monero-in-500-words\/"},{"key":"26_CR31","unstructured":"Segura, J.: Persistent drive-by cryptomining coming to a browser near you (2017). https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/11\/persistent-drive-by-cryptomining-coming-to-a-browser-near-you\/"},{"key":"26_CR32","doi-asserted-by":"crossref","unstructured":"Konoth, R.K., et al.: MineSweeper: an in-depth look into drive-by cryptocurrency mining and its defense (2018)","DOI":"10.1145\/3243734.3243858"},{"key":"26_CR33","unstructured":"Kudelski Security: The BLAKE2 cryptographic hash and message authentication code (2015). https:\/\/tools.ietf.org\/html\/rfc7693"},{"key":"26_CR34","doi-asserted-by":"crossref","unstructured":"Lam, V., Antonatos, S., Akritidis, P., Anagnostakis, K.G.: Puppetnets: misusing web browsers as a distributed attack infrastructure. In: Proceedings of the 13th ACM Conference on Computer and Communications Security, pp. 221\u2013234. ACM (2006)","DOI":"10.1145\/1180405.1180434"},{"key":"26_CR35","doi-asserted-by":"crossref","unstructured":"Lee, S., Kim, H., Kim, J.: Identifying cross-origin resource status using application cache. In: 22nd Annual Network and Distributed System Security Symposium, NDSS 2015 (2015)","DOI":"10.14722\/ndss.2015.23027"},{"key":"26_CR36","unstructured":"Xu, L., Intel Corporation: Securing the enterprise with Intel AES-NI (2010). https:\/\/www.intel.com\/content\/dam\/doc\/white-paper\/enterprise-security-aes-ni-white-paper.pdf"},{"key":"26_CR37","unstructured":"Nadeau, M.: What is cryptojacking? How to prevent, detect, and recover from it. https:\/\/www.csoonline.com\/article\/3253572\/internet\/what-is-cryptojacking-how-to-prevent-detect-and-recover-from-it.html"},{"key":"26_CR38","unstructured":"Mozilla Developer Network: Cache API. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Cache"},{"key":"26_CR39","unstructured":"Mozilla Developer Network: Using web workers. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Web_Workers_API\/Using_web_workers"},{"key":"26_CR40","unstructured":"Mozilla Developer Network: WebGL. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/WebGL_API"},{"key":"26_CR41","doi-asserted-by":"crossref","unstructured":"Gelernter, N.: Timing attacks have never been so practical: advanced cross-site search attacks. Black Hat USA (2016)","DOI":"10.1145\/2810103.2813688"},{"key":"26_CR42","doi-asserted-by":"crossref","unstructured":"Papadopoulos, P., Ilia, P., Polychronakis, M., Markatos, E.P., Ioannidis, S., Vasiliadis, G.: Master of web puppets: abusing web browsers for persistent and stealthy computation (2018)","DOI":"10.14722\/ndss.2019.23070"},{"key":"26_CR43","unstructured":"Pellegrino, G., Rossow, C., Ryba, F.J., Schmidt, T.C., W\u00e4hlisch, M.: Cashing out the great cannon? On browser-based DDoS attacks and economics. In: 9th USENIX Workshop on Offensive Technologies (WOOT 2015) (2015)"},{"key":"26_CR44","unstructured":"Hackett, R.: Popular google chrome extension caught mining cryptocurrency on thousands of computers (2018). http:\/\/fortune.com\/2018\/01\/02\/google-chrome-extension-cryptocurrency-mining-monero\/"},{"key":"26_CR45","doi-asserted-by":"crossref","unstructured":"Eskandari, S., Leoutsarakos, A., Mursch, T., Clark, J.: A first look at browser-based cryptojacking (2018)","DOI":"10.1109\/EuroSPW.2018.00014"},{"key":"26_CR46","unstructured":"Taylor, M.B.: Bitcoin and the age of bespoke silicon. In: Proceedings of the 2013 International Conference on Compilers, Architectures and Synthesis for Embedded Systems, p. 16. IEEE Press (2013)"},{"key":"26_CR47","doi-asserted-by":"crossref","unstructured":"Van Goethem, T., Joosen, W., Nikiforakis, N.: The clock is still ticking: timing attacks in the modern web. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 1382\u20131393. ACM (2015)","DOI":"10.1145\/2810103.2813632"},{"key":"26_CR48","unstructured":"W3C: Service Workers, June 2015. https:\/\/www.w3.org\/TR\/service-workers\/"},{"key":"26_CR49","unstructured":"W3C: Web Notifications, October 2015. https:\/\/www.w3.org\/TR\/notifications\/"},{"key":"26_CR50","unstructured":"WASM: WebAssembly. https:\/\/webassembly.org\/"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2019"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-29962-0_26","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,15]],"date-time":"2024-09-15T00:15:11Z","timestamp":1726359311000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-29962-0_26"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030299613","9783030299620"],"references-count":50,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-29962-0_26","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"15 September 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 September 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 September 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/conf.laas.fr\/esorics\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"344","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"67","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3,2","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"11","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}