{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,14]],"date-time":"2026-02-14T10:47:00Z","timestamp":1771066020106,"version":"3.50.1"},"reference-count":22,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012,7]]},"DOI":"10.1109\/pst.2012.6297927","type":"proceedings-article","created":{"date-parts":[[2012,9,17]],"date-time":"2012-09-17T16:45:25Z","timestamp":1347900325000},"page":"112-119","source":"Crossref","is-referenced-by-count":11,"title":["Automated detection of session management vulnerabilities in web applications"],"prefix":"10.1109","author":[{"given":"Yusuke","family":"Takamatsu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuji","family":"Kosuga","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kenji","family":"Kono","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","year":"0"},{"key":"22","first-page":"238","article-title":"Defeating cross-site request forgery attacks with browser-enforced authenticity protection","author":"mao","year":"0","journal-title":"Proc of Int'l Conf on Financial Cryptography and Data Security (2009)"},{"key":"17","year":"0"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1145\/1135777.1135817"},{"key":"15","first-page":"5","article-title":"Requestrodeo: Client side protection against session riding","author":"johns","year":"2006","journal-title":"Proc of OWASP Europe Conf"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1109\/SECCOMW.2006.359531"},{"key":"13","author":"kolsek","year":"0","journal-title":"Session Fixation Vulnerability in Web-based Applications"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1145\/1982185.1982511"},{"key":"11","first-page":"175","article-title":"Amberate: A framework for automated vulnerability scanners for web applications","volume":"28","author":"yuji","year":"2011","journal-title":"JSSST Trans on Computer Software"},{"key":"12","first-page":"107","article-title":"Sania: Syntactic and Semantic Analysis for Automated Testing against SQL Injection","author":"yuji","year":"0","journal-title":"Proc of Annual Computer Security Applications Conference (2007)"},{"key":"21","year":"0","journal-title":"WhiteHat Website Security Statistics Report"},{"key":"3","year":"0"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455783"},{"key":"2","year":"0"},{"key":"1","year":"0"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046734"},{"key":"7","year":"0"},{"key":"6","year":"0"},{"key":"5","year":"0"},{"key":"4","year":"0"},{"key":"9","author":"chris","year":"0","journal-title":"Security corner Cross-site request forgeries"},{"key":"8","year":"0"}],"event":{"name":"2012 Tenth Annual International Conference on Privacy, Security and Trust (PST)","location":"Paris, France","start":{"date-parts":[[2012,7,16]]},"end":{"date-parts":[[2012,7,18]]}},"container-title":["2012 Tenth Annual International Conference on Privacy, Security and Trust"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/6287257\/6297910\/06297927.pdf?arnumber=6297927","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,21]],"date-time":"2017-03-21T20:12:51Z","timestamp":1490127171000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6297927\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,7]]},"references-count":22,"URL":"https:\/\/doi.org\/10.1109\/pst.2012.6297927","relation":{},"subject":[],"published":{"date-parts":[[2012,7]]}}}