{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T02:11:06Z","timestamp":1743127866406,"version":"3.40.3"},"publisher-location":"Cham","reference-count":33,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030808242"},{"type":"electronic","value":"9783030808259"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-80825-9_19","type":"book-chapter","created":{"date-parts":[[2021,7,8]],"date-time":"2021-07-08T23:38:40Z","timestamp":1625787520000},"page":"371-390","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Centy: Scalable Server-Side Web Integrity Verification System Based on Fuzzy Hashes"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2275-5298","authenticated-orcid":false,"given":"Lizzy","family":"Tengana","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2742-0641","authenticated-orcid":false,"given":"Jesus","family":"Solano","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1147-758X","authenticated-orcid":false,"given":"Alejandra","family":"Castelblanco","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1068-0623","authenticated-orcid":false,"given":"Esteban","family":"Rivera","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5399-4326","authenticated-orcid":false,"given":"Christian","family":"Lopez","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7816-5775","authenticated-orcid":false,"given":"Martin","family":"Ochoa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,7,9]]},"reference":[{"key":"19_CR1","unstructured":"Can I use... Support tables for HTML5, CSS3, etc. https:\/\/caniuse.com\/. Accessed 28 Nov 2020"},{"key":"19_CR2","unstructured":"DOM-observer: An abstraction for Mutation Observer with some extra features. https:\/\/github.com\/jstoolkit\/dom-observer"},{"key":"19_CR3","doi-asserted-by":"crossref","unstructured":"Zhuang, W., Jiang, Q., Xiong, T.: An intelligent anti-phishing strategy model for phishing website detection. In: 2012 32nd International Conference on Distributed Computing Systems Workshops. 51\u201356 (2012). IEEE","DOI":"10.1109\/ICDCSW.2012.66"},{"key":"19_CR4","doi-asserted-by":"crossref","unstructured":"Ben-Bassat, I., Rokah, E.: Locality-sensitive hashing for efficient web application security testing. arXiv.2001.01128 (2020)","DOI":"10.5220\/0007255301930204"},{"key":"19_CR5","unstructured":"MutationObserver - Web APIs\u2014MDN. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/MutationObserver"},{"issue":"3","key":"19_CR6","doi-asserted-by":"publisher","first-page":"1739","DOI":"10.11591\/ijeecs.v21.i3.pp1739-1750","volume":"21","author":"S Abed","year":"2021","unstructured":"Abed, S., Waleed, L., Aldamkhi, G., Hadi, K.: Enhancement in data security and integrity using minhash technique. Indones. J. Electr. Eng. Comput. Sci. 21(3), 1739\u20131750 (2021)","journal-title":"Indones. J. Electr. Eng. Comput. Sci."},{"key":"19_CR7","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"publisher","first-page":"567","DOI":"10.1007\/978-981-32-9515-5_54","volume-title":"Computing in Engineering and Technology","author":"TI Bagban","year":"2020","unstructured":"Bagban, T.I., Kulkarni, P.J.: Template based clustering of web documents using locality sensitive hashing (LSH). In: Iyer, B., Deshpande, P.S., Sharma, S.C., Shiurkar, U. (eds.) Computing in Engineering and Technology. AISC, vol. 1025, pp. 567\u2013584. Springer, Singapore (2020). https:\/\/doi.org\/10.1007\/978-981-32-9515-5_54"},{"key":"19_CR8","doi-asserted-by":"crossref","unstructured":"Chen, Q., Snyder, P., Livshits, B., Kapravelos, A.: Improving web content blocking with event-loop-turn granularity Javascript signatures. arXiv (May 2020)","DOI":"10.1109\/SP40001.2021.00007"},{"key":"19_CR9","doi-asserted-by":"crossref","unstructured":"Cova, M., Kruegel, C., Vigna, G.: Detection and analysis of drive-by-download attacks and malicious Javascript code. In: Proceedings of the 19th International Conference on World Wide Web, pp. 281\u2013290 (2010)","DOI":"10.1145\/1772690.1772720"},{"key":"19_CR10","doi-asserted-by":"crossref","unstructured":"Dhar, A., Ulqinaku, E., Kostiainen, K., Capkun, S.: Protection: root-of-trust for IO in compromised platforms. In: Proceedings 2020 Network and Distributed System Security Symposium. Internet Society (2020)","DOI":"10.14722\/ndss.2020.24112"},{"issue":"1","key":"19_CR11","doi-asserted-by":"publisher","first-page":"29","DOI":"10.4018\/jaci.2012010103","volume":"4","author":"T Dougan","year":"2012","unstructured":"Dougan, T., Curran, K.: Man in the browser attacks. Int. J. Ambient Comput. Intell. (IJACI) 4(1), 29\u201339 (2012)","journal-title":"Int. J. Ambient Comput. Intell. (IJACI)"},{"key":"19_CR12","doi-asserted-by":"crossref","unstructured":"Eskandarian, S., et al.: Fidelius: protecting user secrets from compromised browsers. In: 2019 IEEE Symposium on Security and Privacy (SP), pp. 264\u2013280. IEEE (2019)","DOI":"10.1109\/SP.2019.00036"},{"key":"19_CR13","unstructured":"Fajardo, I., Deiro, C.: Systems and methods for detecting and addressing html modifying malware - US.9798875 (2017)"},{"key":"19_CR14","unstructured":"GeeksOnSecurity: Malicious Javascript Dataset. https:\/\/github.com\/geeksonsecurity\/js-malicious-dataset. Accessed 3 Jan 2021"},{"key":"19_CR15","doi-asserted-by":"crossref","unstructured":"Goltzsche, D., Wulf, C., Muthukumaran, D., Rieck, K., Pietzuch, P., Kapitza, R.: TrustJS: trusted client-side execution of Javascript. In: Proceedings of the 10th European Workshop on Systems Security, pp. 1\u20136 (2017)","DOI":"10.1145\/3065913.3065917"},{"key":"19_CR16","unstructured":"Hunt, A.: Using hash signatures of DOM objects to identify similarity - US.9686283 (2017)"},{"key":"19_CR17","doi-asserted-by":"crossref","unstructured":"Indyk, P., Motwani, R.: Approximate nearest neighbors: towards removing the curse of dimensionality. In: Proceedings of the Thirtieth Annual ACM Symposium on Theory of Computing, pp. 604\u2013613 (1998)","DOI":"10.1145\/276698.276876"},{"key":"19_CR18","unstructured":"Kapravelos, A., Grier, C., Chachra, N., Kruegel, C., Vigna, G., Paxson, V.: Hulk: eliciting malicious behavior in browser extensions. In: 23rd USENIX Security Symposium (USENIX Security 14), pp. 641\u2013654 (2014)"},{"key":"19_CR19","doi-asserted-by":"crossref","unstructured":"Kirda, E., Kruegel, C., Vigna, G., Jovanovic, N.: Noxes: a client-side solution for mitigating cross-site scripting attacks. In: Proceedings of the 2006 ACM Symposium on Applied Computing, pp. 330\u2013337 (2006)","DOI":"10.1145\/1141277.1141357"},{"key":"19_CR20","first-page":"365","volume":"4","author":"A Klein","year":"2005","unstructured":"Klein, A.: Dom based cross site scripting or XSS of the third kind. Web Appl. Secur. Consort. Artic. 4, 365\u2013372 (2005)","journal-title":"Web Appl. Secur. Consort. Artic."},{"key":"19_CR21","doi-asserted-by":"crossref","unstructured":"Lekies, S., Stock, B., Johns, M.: 25 million flows later: large-scale detection of DOM-based XSS. In: Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, pp. 1193\u20131204 (2013)","DOI":"10.1145\/2508859.2516703"},{"key":"19_CR22","series-title":"Lecture Notes in Computer Science (Lecture Notes in Artificial Intelligence)","doi-asserted-by":"publisher","first-page":"162","DOI":"10.1007\/978-3-030-04503-6_16","volume-title":"Trends and Applications in Knowledge Discovery and Data Mining","author":"M Moniruzzaman","year":"2018","unstructured":"Moniruzzaman, M., Bagirov, A., Gondal, I., Brown, S.: A server side solution for detecting webinject: a machine learning approach. In: Ganji, M., Rashidi, L., Fung, B.C.M., Wang, C. (eds.) PAKDD 2018. LNCS (LNAI), vol. 11154, pp. 162\u2013167. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-04503-6_16"},{"key":"19_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1007\/978-3-642-19125-1_7","volume-title":"Engineering Secure Software and Systems","author":"N Nikiforakis","year":"2011","unstructured":"Nikiforakis, N., Meert, W., Younan, Y., Johns, M., Joosen, W.: SessionShield: lightweight protection against session hijacking. In: Erlingsson, \u00da., Wieringa, R., Zannone, N. (eds.) ESSoS 2011. LNCS, vol. 6542, pp. 87\u2013100. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-19125-1_7"},{"key":"19_CR24","unstructured":"Petrak, H.: Javascript Malware Collection. https:\/\/github.com\/HynekPetrak\/javascript-malware-collection. Accessed 3 Jan 2021"},{"key":"19_CR25","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781139058452","volume-title":"Mining of Massive Datasets","author":"A Rajaraman","year":"2011","unstructured":"Rajaraman, A., Ullman, J.D.: Mining of Massive Datasets. Cambridge University Press, Cambridge (2011)"},{"key":"19_CR26","doi-asserted-by":"crossref","unstructured":"Rieck, K., Krueger, T., Dewald, A.: Cujo: efficient detection and prevention of drive-by-download attacks. In: Proceedings of the 26th Annual Computer Security Applications Conference, pp. 31\u201339 (2010)","DOI":"10.1145\/1920261.1920267"},{"key":"19_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"539","DOI":"10.1007\/978-3-642-04444-1_33","volume-title":"Computer Security \u2013 ESORICS 2009","author":"F Sun","year":"2009","unstructured":"Sun, F., Xu, L., Su, Z.: Client-side detection of XSS worms by monitoring payload propagation. In: Backes, M., Ning, P. (eds.) ESORICS 2009. LNCS, vol. 5789, pp. 539\u2013554. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-04444-1_33"},{"key":"19_CR28","doi-asserted-by":"publisher","first-page":"100367","DOI":"10.1016\/j.cosrev.2021.100367","volume":"40","author":"G Tekli","year":"2021","unstructured":"Tekli, G.: A survey on semi-structured web data manipulations by non-expert users. Comput. Sci. Rev. 40, 100367 (2021)","journal-title":"Comput. Sci. Rev."},{"issue":"18","key":"19_CR29","doi-asserted-by":"publisher","first-page":"6266","DOI":"10.1002\/sec.1674","volume":"9","author":"G Varshney","year":"2016","unstructured":"Varshney, G., Misra, M., Atrey, P.K.: A survey and classification of web phishing detection schemes. Secur. Commun. Netw. 9(18), 6266\u20136284 (2016). https:\/\/doi.org\/10.1002\/sec.1674","journal-title":"Secur. Commun. Netw."},{"key":"19_CR30","unstructured":"VirusTotal: Malware Querying Service. https:\/\/www.virustotal.com. Accessed 3 Jan 2021"},{"key":"19_CR31","unstructured":"w3 schools: JavaScript HTML DOM. https:\/\/www.w3schools.com\/js\/js_htmldom.asp"},{"issue":"2","key":"19_CR32","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2019599.2019606","volume":"14","author":"G Xiang","year":"2011","unstructured":"Xiang, G., Hong, J., Rose, C.P., Cranor, L.: Cantina+: a feature-rich machine learning framework for detecting phishing web sites. ACM Trans. Inf. Syst. Secur. (TISSEC) 14(2), 1\u201328 (2011)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"19_CR33","doi-asserted-by":"crossref","unstructured":"Zhang, M., Meng, W.: Detecting and understanding JavaScript global identifier conflicts on the web. In: ESEC\/FSE 2020 - Proceedings of the 28th ACM Joint Meeting European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pp. 38\u201349. Association for Computing Machinery Inc., New York (November 2020)","DOI":"10.1145\/3368089.3409747"}],"container-title":["Lecture Notes in Computer Science","Detection of Intrusions and Malware, and Vulnerability Assessment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-80825-9_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,3]],"date-time":"2023-01-03T12:09:51Z","timestamp":1672747791000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-80825-9_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030808242","9783030808259"],"references-count":33,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-80825-9_19","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"9 July 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DIMVA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 July 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 July 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"dimva2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/dimva2021.campus.ciencias.ulisboa.pt\/cfp.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCRP","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"65","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"18","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"28% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}