{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T03:37:58Z","timestamp":1768880278912,"version":"3.49.0"},"reference-count":21,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012,7]]},"DOI":"10.1109\/iscc.2012.6249380","type":"proceedings-article","created":{"date-parts":[[2012,8,1]],"date-time":"2012-08-01T15:05:52Z","timestamp":1343833552000},"page":"000702-000707","source":"Crossref","is-referenced-by-count":38,"title":["Automatic classification of cross-site scripting in web pages using document-based and URL-based features"],"prefix":"10.1109","author":[{"given":"Angelo Eduardo","family":"Nunan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eduardo","family":"Souto","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eulanda M.","family":"dos Santos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eduardo","family":"Feitosa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","year":"2010","journal-title":"CAPEC-245 Cross-Site Scripting Using Doubled Characters"},{"key":"17","year":"2011","journal-title":"CAPEC-72 URL Encoding"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553462"},{"key":"15","first-page":"25","article-title":"Static and dynamic analysis: Synergy and duality","author":"ernst","year":"2003","journal-title":"Proceedings of WODA'2003 (ICSE Work-shop on Dynamic Analysis)"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242654"},{"key":"13","author":"klein","year":"0","journal-title":"DOM Based Cross Site Scripting or XSS of the Third Kind A Look at on Overlooked Flavor of XSS"},{"key":"14","article-title":"Charatering insecure javascript practice on the web","author":"yue","year":"2005","journal-title":"Proceedings of the 16th international conference on World Wide Web"},{"key":"11","doi-asserted-by":"crossref","DOI":"10.1145\/1541880.1541882","article-title":"Anomaly detection: Survey. A modified version of this technical report will appear","author":"chandola","year":"2009","journal-title":"ACM Computing Survey"},{"key":"12","author":"grossman","year":"2007","journal-title":"Cross Site Scripting Attacks Xss Exploits and Defense"},{"key":"21","author":"witten","year":"0","journal-title":"Data Mining Practical Machine Learning Tools and Techniques"},{"key":"3","year":"2008","journal-title":"OWASP Testing Guide"},{"key":"20","author":"alpaydin","year":"2004","journal-title":"Introduction to Machine Learning"},{"key":"2","article-title":"Vulnerabilidades em aplicac?o?es web e mecanismos de protec?a?o","author":"uto","year":"2009","journal-title":"Minicursos SBSeg 2009 IX Simpo?sio Brasileiro em Seguranc?a da Informac?a?o e de Sistemas Computacionais"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1145\/1368088.1368112"},{"key":"10","doi-asserted-by":"crossref","DOI":"10.1145\/1920261.1920267","article-title":"Cujo: Effcient detection and prevention of drive-by-download attacks","author":"rieck","year":"2010","journal-title":"26th Annual Computer Security Applications Conference 2010 ACSAC"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1145\/1141277.1141357"},{"key":"6","article-title":"Noncespaces: Using randomization to enforce information flow tracking and thwart cross-site scripting attacks","author":"gundy","year":"2009","journal-title":"16th Annual Network & Distributed System Security Symposium NDSS Symposium"},{"key":"5","article-title":"Document structure integrity: A robust basis for cross-site scripting defense","author":"nadji","year":"2009","journal-title":"16th Annual Network & Distributed System Security Symposium NDSS Symposium"},{"key":"4","year":"2010","journal-title":"OWASP Top 10 - 2010 The Ten Most Critical Web Application Security Risks"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2009.5403020"},{"key":"8","article-title":"Cross-site scripting prevention with dynamic data tainting and static analysis","author":"vogt","year":"2007","journal-title":"the Symposium on Network and Distributed System Security NDSS-95"}],"event":{"name":"2012 IEEE Symposium on Computers and Communications (ISCC)","location":"Cappadocia, Turkey","start":{"date-parts":[[2012,7,1]]},"end":{"date-parts":[[2012,7,4]]}},"container-title":["2012 IEEE Symposium on Computers and Communications (ISCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/6241753\/6249257\/06249380.pdf?arnumber=6249380","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,20]],"date-time":"2017-06-20T22:18:31Z","timestamp":1497997111000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6249380\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,7]]},"references-count":21,"URL":"https:\/\/doi.org\/10.1109\/iscc.2012.6249380","relation":{},"subject":[],"published":{"date-parts":[[2012,7]]}}}