{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,31]],"date-time":"2026-03-31T14:30:10Z","timestamp":1774967410637,"version":"3.50.1"},"reference-count":18,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2020,5,1]],"date-time":"2020-05-01T00:00:00Z","timestamp":1588291200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,5,1]],"date-time":"2020-05-01T00:00:00Z","timestamp":1588291200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,5,1]],"date-time":"2020-05-01T00:00:00Z","timestamp":1588291200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100008904","name":"Universit\u00e0 Ca Foscari di Venezia","doi-asserted-by":"publisher","award":["IRIDE program \"Machine learning for web security\""],"award-info":[{"award-number":["IRIDE program \"Machine learning for web security\""]}],"id":[{"id":"10.13039\/501100008904","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Secur. Privacy"],"published-print":{"date-parts":[[2020,5]]},"DOI":"10.1109\/msec.2019.2961649","type":"journal-article","created":{"date-parts":[[2020,1,22]],"date-time":"2020-01-22T22:04:26Z","timestamp":1579730666000},"page":"8-16","source":"Crossref","is-referenced-by-count":19,"title":["Machine Learning for Web Vulnerability Detection: The Case of Cross-Site Request Forgery"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9179-8270","authenticated-orcid":false,"given":"Stefano","family":"Calzavara","sequence":"first","affiliation":[{"name":"Universita Ca&#x0027; Foscari, Venezia, Italy"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3612-1934","authenticated-orcid":false,"given":"Mauro","family":"Conti","sequence":"additional","affiliation":[{"name":"University of Padua, Padua, Italy, Italy"}]},{"given":"Riccardo","family":"Focardi","sequence":"additional","affiliation":[{"name":"Universita Ca&#x0027; Foscari, Venezia, Italy"}]},{"given":"Alvise","family":"Rabitti","sequence":"additional","affiliation":[{"name":"Universita Ca&#x0027; Foscari, Venezia, Italy"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7471-6659","authenticated-orcid":false,"given":"Gabriele","family":"Tolomei","sequence":"additional","affiliation":[{"name":"Sapienza University of Rome, Roma, Italy"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2012.2184356"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1038\/nature16961"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-150529"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2754933"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00045"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133959"},{"key":"ref16","author":"calzavara","year":"0","journal-title":"mitch"},{"key":"ref17","year":"0","journal-title":"Using Burp to Test for Cross-Site Request Forgery (CSRF)"},{"key":"ref18","author":"rancho","year":"0","journal-title":"W3AF"},{"key":"ref4","year":"2016","journal-title":"OWASP Testing Guide"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29962-0_29"},{"key":"ref6","first-page":"111","article-title":"Why Johnny can&#x2019;t pentest: An analysis of black-box web vulnerability scanners","author":"doup\u00e9","year":"0","journal-title":"Proc Int'l Conf Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA)"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.27"},{"key":"ref8","author":"mohri","year":"2012","journal-title":"Foundations of Machine Learning"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455782"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.45"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3038923"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.1993.11517977"}],"container-title":["IEEE Security &amp; Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8013\/9091349\/08966601.pdf?arnumber=8966601","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,5]],"date-time":"2022-05-05T19:43:56Z","timestamp":1651779836000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8966601\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,5]]},"references-count":18,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/msec.2019.2961649","relation":{},"ISSN":["1540-7993","1558-4046"],"issn-type":[{"value":"1540-7993","type":"print"},{"value":"1558-4046","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,5]]}}}