{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,5]],"date-time":"2026-08-05T09:45:25Z","timestamp":1785923125281,"version":"3.56.0"},"reference-count":26,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T00:00:00Z","timestamp":1782345600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Array"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.array.2026.101044","type":"journal-article","created":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T16:32:28Z","timestamp":1782405148000},"page":"101044","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Machine learning-based prototype pollution attack detection model"],"prefix":"10.1016","volume":"31","author":[{"given":"Irum Andleeb","family":"Aslam","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0757-8457","authenticated-orcid":false,"given":"Malik","family":"Imran-Daud","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.array.2026.101044_bib27","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3386327","article-title":"JavaScript: the first 20 years","volume":"4","author":"Wirfs-Brock","year":"2020","journal-title":"Proceedings of the ACM on Programming Languages"},{"key":"10.1016\/j.array.2026.101044_bib7","article-title":"On the (un\u2010)adoption of JavaScript front\u2010end frameworks","volume":"52","author":"Ferreira","year":"2021","journal-title":"Softw - Pract Exp"},{"key":"10.1016\/j.array.2026.101044_bib4","series-title":"Culminating projects in computer science and information technology","article-title":"A comparative analysis of Node.js (Server-Side JavaScript)","author":"Chhetri","year":"2016"},{"key":"10.1016\/j.array.2026.101044_bib24","series-title":"Object-Oriented JavaScript","author":"Stefanov","year":"2013"},{"key":"10.1016\/j.array.2026.101044_bib3","series-title":"Prototype pollution attack in node.js application","author":"Arteau","year":"2018"},{"key":"10.1016\/j.array.2026.101044_bib5","series-title":"Prototype pollution: the dangerous and underrated vulnerability impacting JavaScript applications","author":"Dickson","year":"2023"},{"key":"10.1016\/j.array.2026.101044_bib22","series-title":"Silent Spring: prototype pollution leads to remote code execution in Node.js","author":"Shcherbakov","year":"2022"},{"key":"10.1016\/j.array.2026.101044_bib14","series-title":"Proceedings of the 29th ACM joint meeting on European software engineering conference and symposium on the foundations of software engineering","first-page":"268","article-title":"Detecting node.js prototype pollution vulnerabilities via object lookup analysis","author":"Li","year":"2021"},{"key":"10.1016\/j.array.2026.101044_bib13","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10207-020-00537-0","article-title":"DAPP: automatic detection and analysis of prototype pollution vulnerability in Node.js modules","volume":"21","author":"Kim","year":"2022","journal-title":"Int J Inf Secur"},{"key":"10.1016\/j.array.2026.101044_bib23","series-title":"How to prevent prototype pollution in JavaScript","year":"2025"},{"key":"10.1016\/j.array.2026.101044_bib30","author":"Mafintosh"},{"key":"10.1016\/j.array.2026.101044_bib31","unstructured":"NIST, National vulnerabilities database, Available at: https:\/\/nvd.nist.gov\/vuln, (Accessed: Mar 2026)."},{"key":"10.1016\/j.array.2026.101044_bib15","series-title":"USENIX security symposium","article-title":"Mining Node.js vulnerabilities via object dependence graph and query","author":"Li","year":"2022"},{"key":"10.1016\/j.array.2026.101044_bib29","series-title":"Network and distributed System security symposium. San Diego, CA, USA: internet Society","article-title":"Probe the proto: measuring ClientSide prototype pollution vulnerabilities of one million real-world websites","author":"Kang","year":"2022"},{"key":"10.1016\/j.array.2026.101044_bib8","series-title":"Detecting prototype pollution vulnerabilities in JavaScript using static analysis","author":"Dotti","year":"2022"},{"key":"10.1016\/j.array.2026.101044_bib25","series-title":"Detection of prototype pollution using Joern Joern's detection capability compared to CodeQL's","author":"Fr\u00f6berg","year":"2023"},{"key":"10.1016\/j.array.2026.101044_bib9","series-title":"Server-side prototype pollution: Black-box detection without the DoS | PortSwigger Research","author":"Heyes","year":"2023"},{"key":"10.1016\/j.array.2026.101044_bib10","series-title":"Ppmap - a scanner or exploitation tool written in GO","author":"Gandal","year":"2021"},{"key":"10.1016\/j.array.2026.101044_bib6","volume":"0.2","author":"Siswanto","year":"2022"},{"key":"10.1016\/j.array.2026.101044_bib21","series-title":"Prototype pollution scanner using headless chrome","author":"Raverr","year":"2021"},{"key":"10.1016\/j.array.2026.101044_bib1","doi-asserted-by":"crossref","DOI":"10.3390\/info15070420","article-title":"Machine learning-driven detection of cross-site scripting attacks","volume":"15","author":"Alhamyani","year":"2024","journal-title":"Information"},{"key":"10.1016\/j.array.2026.101044_bib2","first-page":"1","article-title":"Cross-site scripting attack detection using machine learning with hybrid features","volume":"13","author":"Arno","year":"2021","journal-title":"JURNAL INFOTEL"},{"issue":"1","key":"10.1016\/j.array.2026.101044_bib12","doi-asserted-by":"crossref","first-page":"67","DOI":"10.2339\/politeknik.470332","article-title":"Malicious xss code detection with decision tree","volume":"23","author":"Kas\u0131m","year":"2020","journal-title":"Politeknik Dergisi"},{"key":"10.1016\/j.array.2026.101044_bib16","series-title":"SQL injection detection using machine learning","author":"Mishra","year":"2019"},{"key":"10.1016\/j.array.2026.101044_bib17","doi-asserted-by":"crossref","first-page":"5","DOI":"10.58496\/MJCS\/2022\/002","article-title":"Sql injection attack detection using machine learning algorithm","volume":"2022","author":"Muhammad","year":"2022","journal-title":"Mesopotamian Journal of Cybersecurity"},{"key":"10.1016\/j.array.2026.101044_bib26","first-page":"599","article-title":"Classification model evaluation metrics","volume":"12","author":"Vujovic","year":"2021","journal-title":"Int J Adv Comput Sci Appl"}],"container-title":["Array"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S259000562600367X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S259000562600367X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,5]],"date-time":"2026-08-05T08:54:44Z","timestamp":1785920084000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S259000562600367X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":26,"alternative-id":["S259000562600367X"],"URL":"https:\/\/doi.org\/10.1016\/j.array.2026.101044","relation":{},"ISSN":["2590-0056"],"issn-type":[{"value":"2590-0056","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Machine learning-based prototype pollution attack detection model","name":"articletitle","label":"Article Title"},{"value":"Array","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.array.2026.101044","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier Inc.","name":"copyright","label":"Copyright"}],"article-number":"101044"}}