{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T02:45:53Z","timestamp":1743129953903,"version":"3.40.3"},"publisher-location":"Cham","reference-count":35,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031346705"},{"type":"electronic","value":"9783031346712"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-34671-2_1","type":"book-chapter","created":{"date-parts":[[2023,6,20]],"date-time":"2023-06-20T23:02:58Z","timestamp":1687302178000},"page":"1-17","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Localhost Detour from\u00a0Public to\u00a0Private Networks"],"prefix":"10.1007","author":[{"given":"Yehuda","family":"Afek","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anat","family":"Bremler-Barr","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dor","family":"Israeli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alon","family":"Noy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,6,21]]},"reference":[{"key":"1_CR1","unstructured":"Trendmicro node.js http server listening on localhost can execute commands (2016). https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail?id=693 &redir=1"},{"key":"1_CR2","unstructured":"Cve-2020-7913: Xss vulnerability on jetbrains youtrack (2020). https:\/\/cvedata.com\/cve\/CVE-2020-7913\/"},{"key":"1_CR3","unstructured":"API documentation & design tools for teams $$|$$ swagger (2021). https:\/\/swagger.io"},{"key":"1_CR4","unstructured":"Arduino digital store (2021). https:\/\/create.arduino.cc"},{"key":"1_CR5","unstructured":"Dropbox is building the world\u2019s first smart workspace. (2021). https:\/\/www.dropbox.com\/home"},{"key":"1_CR6","unstructured":"Everything - jetbrains youtrack (2021). https:\/\/youtrack.jetbrains.com"},{"key":"1_CR7","unstructured":"Folding@home (2021). https:\/\/foldingathome.org\/about\/"},{"key":"1_CR8","unstructured":"Hedgedoc (2021). https:\/\/docs.hedgedoc.org\/"},{"key":"1_CR9","unstructured":"Home - welcome to mysqueezebox.com! (2021). https:\/\/mysqueezebox.com"},{"key":"1_CR10","unstructured":"Jetbrains (2021). https:\/\/www.jetbrains.com"},{"key":"1_CR11","unstructured":"Jupyter blog (2021). https:\/\/blog.jupyter.org"},{"key":"1_CR12","unstructured":"Local folding@home web control (2021). https:\/\/client.foldingathome.org"},{"key":"1_CR13","unstructured":"Minio $$|$$ the minio quickstart guide (2021). https:\/\/docs.min.io\/"},{"key":"1_CR14","unstructured":"Production-grade container orchestration (2021). https:\/\/kubernetes.io\/"},{"key":"1_CR15","unstructured":"Spring $$|$$ home (2021). https:\/\/spring.io"},{"key":"1_CR16","unstructured":"Welcome to steam (2021). https:\/\/store.steampowered.com"},{"key":"1_CR17","doi-asserted-by":"crossref","unstructured":"Acar, G., Huang, D.Y., Li, F., Narayanan, A., Feamster, N.: Web-based attacks to discover and control local IoT devices. In: Proceedings of the 2018 Workshop on IoT Security and Privacy, pp. 29\u201335. ACM (2018)","DOI":"10.1145\/3229565.3229568"},{"key":"1_CR18","unstructured":"Afek, Y., Bremler-Barr, A., Noy, A.: Eradicating attacks on the internal network with internal network policy. CoRR abs\/1910.00975 (2019). http:\/\/arxiv.org\/abs\/1910.00975"},{"key":"1_CR19","unstructured":"Chromium: Chromium\u2019s response to an issue (2021). https:\/\/github.com\/WICG\/private-network-access\/issues\/38#issuecomment-766720523"},{"key":"1_CR20","unstructured":"Chromium, Mike West and Titouan Rigoudy: Private Network Access (2021). https:\/\/wicg.github.io\/private-network-access\/"},{"key":"1_CR21","unstructured":"Barda, D., Zaikin, R., Shriki, Y.: Keeping the gate locked on your IoT devices: vulnerabilities found on Amazon\u2019s Alexa (2020). https:\/\/research.checkpoint.com\/2020\/amazons-alexa-hacked\/"},{"key":"1_CR22","unstructured":"Dorsey, B.: Attacking private networks from the internet with DNS rebinding (2018). https:\/\/medium.com\/@brannondorsey\/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325"},{"key":"1_CR23","unstructured":"Hemmings, J.: EE 4GEE mobile WiFi router - multiple security vulnerabilities writeup (2017). https:\/\/blog.jameshemmings.co.uk\/2017\/08\/24\/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup\/#more-276"},{"key":"1_CR24","unstructured":"IANA: IPv4 Special-Purpose Address Registry (2021). https:\/\/www.iana.org\/assignments\/iana-ipv4-special-registry"},{"key":"1_CR25","unstructured":"IANA: Ipv6 special-purpose address registry (2021). https:\/\/www.iana.org\/assignments\/iana-ipv6-special-registry"},{"key":"1_CR26","unstructured":"kumar: Dropbox open redirect - misconfigured regex (2017). https:\/\/www.kumar.ninja\/2017\/07\/dropbox-open-redirect-misconfigured.html"},{"key":"1_CR27","unstructured":"Leitschuh, J.: Zoom zero day: 4+ million webcams & maybe an RCE? Just get them to visit your website! (2019). https:\/\/infosecwriteups.com\/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5"},{"key":"1_CR28","unstructured":"Milne, J.: JetBrains IDE remote code execution and local file disclosure (2016). http:\/\/blog.saynotolinux.com\/blog\/2016\/08\/15\/jetbrains-ide-remote-code-execution-and-local-file-disclosure-vulnerability-analysis\/"},{"key":"1_CR29","unstructured":"Mozilla: Preflight request (2019). https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Preflight_request"},{"key":"1_CR30","unstructured":"Mozilla: Content Security Policy (2019). https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/CSP"},{"key":"1_CR31","unstructured":"Mozilla: Cross-Origin Resource Sharing (CORS) (2019). https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/CORS"},{"key":"1_CR32","unstructured":"Mozilla: Same-origin policy (2019). https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Same-origin_policy"},{"key":"1_CR33","unstructured":"Rowan Merewood, C.: SameSite cookies explained (2019). https:\/\/web.dev\/samesite-cookies-explained\/"},{"key":"1_CR34","unstructured":"WHATWG: HTML: Secure Context (2021). https:\/\/html.spec.whatwg.org\/multipage\/webappapis.html"},{"key":"1_CR35","unstructured":"Afek, Y., Bremler-Barr, A., Israeli, D., Noy, A.: Technical report - Localhost detour from public to private networks. https:\/\/deepness-lab.org\/publications\/localhost-detour-from-public-to-privatenetworks\/"}],"container-title":["Lecture Notes in Computer Science","Cyber Security, Cryptology, and Machine Learning"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-34671-2_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T12:18:57Z","timestamp":1710332337000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-34671-2_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031346705","9783031346712"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-34671-2_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"21 June 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CSCML","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Cyber Security, Cryptology, and Machine Learning","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Be'er Sheva","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Israel","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 June 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 June 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cscml2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.cscml.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Open","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"70","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"21","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"15","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"30% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}