{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T09:46:04Z","timestamp":1725529564413},"publisher-location":"Berlin, Heidelberg","reference-count":25,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642365621"},{"type":"electronic","value":"9783642365638"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-3-642-36563-8_1","type":"book-chapter","created":{"date-parts":[[2013,2,22]],"date-time":"2013-02-22T06:32:47Z","timestamp":1361514767000},"page":"1-16","source":"Crossref","is-referenced-by-count":7,"title":["Control-Flow Integrity in Web Applications"],"prefix":"10.1007","author":[{"given":"Bastian","family":"Braun","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Patrick","family":"Gemein","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hans P.","family":"Reiser","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joachim","family":"Posegga","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"1_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"126","DOI":"10.1007\/978-3-540-70542-0_7","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"R. Paleari","year":"2008","unstructured":"Paleari, R., Marrone, D., Bruschi, D., Monga, M.: On Race Vulnerabilities in Web Applications. In: Zamboni, D. (ed.) DIMVA 2008. LNCS, vol.\u00a05137, pp. 126\u2013142. Springer, Heidelberg (2008)"},{"key":"1_CR2","unstructured":"Chen, S.: Session Puzzles - Indirect Application Attack Vectors (White Paper) (May 23, 2012), \n                    \n                      http:\/\/puzzlemall.googlecode.com\/files\/Session%20Puzzles%20-%20Indirect%20Application%20Attack%20Vectors%20-%20May%202011%20-%20Whitepaper.pdf"},{"key":"1_CR3","unstructured":"Grossman, J.: Seven Business Logic Flaws That Put Your Website At Risk (White Paper) (May 19, 2012), \n                    \n                      https:\/\/www.whitehatsec.com\/assets\/WP_bizlogic092407.pdf"},{"key":"1_CR4","unstructured":"The New York Times: Thieves Found Citigroup Site an Easy Entry (May 24, 2012), \n                    \n                      http:\/\/www.nytimes.com\/2011\/06\/14\/technology\/14security.html"},{"key":"1_CR5","doi-asserted-by":"crossref","unstructured":"Wang, R., Chen, S., Wang, X., Qadeer, S.: How to Shop for Free Online \u2013 Security Analysis of Cashier-as-a-Service Based Web Stores. In: IEEE Symposium on Security and Privacy (2011)","DOI":"10.1109\/SP.2011.26"},{"key":"1_CR6","doi-asserted-by":"crossref","unstructured":"Fielding, R., Gettys, J., Mogul, J., Frystyk, H., Masinter, L., Leach, P., Berners-Lee, T.: Hypertext Transfer Protocol \u2013 HTTP\/1.1. RFC 2616 (June 1999), \n                    \n                      http:\/\/www.w3.org\/Protocols\/rfc2616\/rfc2616.html","DOI":"10.17487\/rfc2616"},{"key":"1_CR7","doi-asserted-by":"crossref","unstructured":"Berners-Lee, T., Fielding, R., Irvine, U., Masinter, L.: Uniform Resource Identifiers (URI): Generic Syntax. RFC 2396 (August 1998), \n                    \n                      http:\/\/www.ietf.org\/rfc\/rfc2396.txt","DOI":"10.17487\/rfc2396"},{"key":"1_CR8","unstructured":"OWASP: Race Conditions (May 23, 2012), \n                    \n                      https:\/\/www.owasp.org\/index.php\/Race_Conditions"},{"key":"1_CR9","doi-asserted-by":"crossref","unstructured":"Hall\u00e9, S., Ettema, T., Bunch, C., Bultan, T.: Eliminating Navigation Errors in Web Applications via Model Checking and Runtime Enforcement of Navigation State Machines. In: ASE (2010)","DOI":"10.1145\/1858996.1859044"},{"key":"1_CR10","doi-asserted-by":"crossref","unstructured":"Kristol, D., Montulli, L.: HTTP State Management Mechanism. RFC 2109 (February 1997), \n                    \n                      http:\/\/www.ietf.org\/rfc\/rfc2109.txt","DOI":"10.17487\/rfc2109"},{"key":"1_CR11","unstructured":"ExpressionEngine Dev Team: CodeIgniter - Open Source PHP Web Application Framework (May 24, 2012), \n                    \n                      http:\/\/www.codeigniter.com\/"},{"key":"1_CR12","unstructured":"Xdebug (June 05, 2012), \n                    \n                      http:\/\/xdebug.org\/"},{"key":"1_CR13","unstructured":"Magento Commerce (September 24, 2012), \n                    \n                      http:\/\/demo.magentocommerce.com\/"},{"key":"1_CR14","unstructured":"OWASP: Failure to Restrict URL Access (May 11, 2012), \n                    \n                      https:\/\/www.owasp.org\/index.php\/Top_10_2010-A8-Failure_to_Restrict_URL_Access"},{"key":"1_CR15","unstructured":"OWASP: Forced Browsing (May 04, 2012), \n                    \n                      https:\/\/www.owasp.org\/index.php\/Forced_browsing"},{"key":"1_CR16","unstructured":"Bray, T.: Deep Linking in the World Wide Web (May 29, 2012), \n                    \n                      http:\/\/www.w3.org\/2001\/tag\/doc\/deeplinking.html"},{"key":"1_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"225","DOI":"10.1007\/978-3-642-13739-6_15","volume-title":"Data and Applications Security and Privacy XXIV","author":"K. Jayaraman","year":"2010","unstructured":"Jayaraman, K., Lewandowski, G., Talaga, P.G., Chapin, S.J.: Enforcing Request Integrity in Web Applications. In: Foresti, S., Jajodia, S. (eds.) Data and Applications Security and Privacy XXIV. LNCS, vol.\u00a06166, pp. 225\u2013240. Springer, Heidelberg (2010)"},{"key":"1_CR18","doi-asserted-by":"crossref","unstructured":"Balzarotti, D., Cova, M., Felmetsger, V., Vigna, G.: Multi-Module Vulnerability Analysis of Web-based Applications. In: CCS (2007)","DOI":"10.1145\/1315245.1315250"},{"key":"1_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1007\/978-3-540-74320-0_4","volume-title":"Recent Advances in Intrusion Detection","author":"M. Cova","year":"2007","unstructured":"Cova, M., Balzarotti, D., Felmetsger, V., Vigna, G.: Swaddler: An Approach for the Anomaly-Based Detection of State Violations in Web Applications. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol.\u00a04637, pp. 63\u201386. Springer, Heidelberg (2007)"},{"key":"1_CR20","unstructured":"Felmetsger, V., Cavedon, L., Kruegel, C., Vigna, G.: Toward Automated Detection of Logic Vulnerabilities in Web Applications. In: USENIX Security (2010)"},{"key":"1_CR21","doi-asserted-by":"crossref","unstructured":"Li, X., Xue, Y.: BLOCK: A Black-box Approach for Detection of State Violation Attacks Towards Web Applications. In: ACSAC (2011)","DOI":"10.1145\/2076732.2076767"},{"key":"1_CR22","doi-asserted-by":"crossref","unstructured":"Vikram, K., Prateek, A., Livshits, B.: Ripley: Automatically Securing Web 2.0 Applications Through Replicated Execution. In: CCS (2009)","DOI":"10.1145\/1653662.1653685"},{"key":"1_CR23","doi-asserted-by":"crossref","unstructured":"Bisht, P., Hinrichs, T., Skrupsky, N., Bobrowicz, R., Venkatakrishnan, V.N.: NoTamper: Automatic Blackbox Detection of Parameter Tampering Opportunities in Web Applications. In: CCS (2010)","DOI":"10.1145\/1866307.1866375"},{"key":"1_CR24","doi-asserted-by":"crossref","unstructured":"Guha, A., Krishnamurthi, S., Jim, T.: Using Static Analysis for Ajax Intrusion Detection. In: WWW (2009)","DOI":"10.1145\/1526709.1526785"},{"key":"1_CR25","unstructured":"Balduzzi, M., Gimenez, C.T., Balzarotti, D., Kirda, E.: Automated Discovery of Parameter Pollution Vulnerabilities in Web Applications. In: NDSS (2011)"}],"container-title":["Lecture Notes in Computer Science","Engineering Secure Software and Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-36563-8_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,11]],"date-time":"2019-05-11T10:53:26Z","timestamp":1557572006000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-36563-8_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9783642365621","9783642365638"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-36563-8_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2013]]}}}