{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,25]],"date-time":"2026-10-25T20:41:34Z","timestamp":1792960894265,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":32,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,10,4]],"date-time":"2010-10-04T00:00:00Z","timestamp":1286150400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,10,4]]},"DOI":"10.1145\/1866307.1866339","type":"proceedings-article","created":{"date-parts":[[2010,10,5]],"date-time":"2010-10-05T14:38:23Z","timestamp":1286289503000},"page":"270-283","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":130,"title":["An empirical study of privacy-violating information flows in JavaScript web applications"],"prefix":"10.1145","author":[{"given":"Dongseok","family":"Jang","sequence":"first","affiliation":[{"name":"University of California, San Diego, La Jolla, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ranjit","family":"Jhala","sequence":"additional","affiliation":[{"name":"University of California, San Diego, La Jolla, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sorin","family":"Lerner","sequence":"additional","affiliation":[{"name":"University of California, San Diego, La Jolla, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hovav","family":"Shacham","sequence":"additional","affiliation":[{"name":"University of California, San Diego, La Jolla, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2010,10,4]]},"reference":[{"key":"e_1_3_2_1_1_1","series-title":"LNCS","first-page":"100","volume-title":"Proceedings of SAS","author":"Amtoft T.","year":"2004","unstructured":"}} T. Amtoft and A. Banerjee . Information flow analysis in logical form . In R.Giacobazzi, editor, Proceedings of SAS 2004 , volume 3148 of LNCS , pages 100 -- 115 . Springer-Verlag , Aug. 2004. }}T.Amtoft and A.Banerjee. Information flow analysis in logical form. In R.Giacobazzi, editor, Proceedings of SAS 2004, volume 3148 of LNCS, pages 100--15. Springer-Verlag, Aug. 2004."},{"key":"e_1_3_2_1_2_1","volume-title":"Apr.","author":"Baron L.D.","year":"2010","unstructured":"}} L.D. Baron . Preventing attacks on a user's history through CSS :visited selectors , Apr. 2010 . Online : http:\/\/dbaron.org\/mozilla\/visited-privacy. }}L.D.Baron. Preventing attacks on a user's history through CSS :visited selectors, Apr. 2010. Online: http:\/\/dbaron.org\/mozilla\/visited-privacy."},{"key":"e_1_3_2_1_3_1","unstructured":"}}Bugzilla@Mozilla. Bug 147777 -- :visited support allows queries into global history May 2002. Online: https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=147777.  }}Bugzilla@Mozilla. Bug 147777 -- :visited support allows queries into global history May 2002. Online: https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=147777."},{"key":"e_1_3_2_1_4_1","first-page":"321","volume-title":"Proceedings of USENIX Security 2004","author":"Chow J.","year":"2004","unstructured":"}} J. Chow , B. Pfaff , T. Garfinkel , K. Christopher , and M. Rosenblum . Understanding data lifetime via whole system simulation. In M.Blaze, editor , Proceedings of USENIX Security 2004 , pages 321 -- 336 . USENIX, Aug. 2004 . }}J.Chow, B.Pfaff, T.Garfinkel, K.Christopher, and M.Rosenblum. Understanding data lifetime via whole system simulation. In M.Blaze, editor, Proceedings of USENIX Security 2004, pages 321--36. USENIX, Aug. 2004."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2010.21"},{"key":"e_1_3_2_1_6_1","volume-title":"Feb.","author":"Clover A.","year":"2002","unstructured":"}} A. Clover . Timing attacks on Web privacy. Online: http:\/\/www.securiteam.com\/securityreviews\/5GP020A6LG.html , Feb. 2002 . }}A.Clover. Timing attacks on Web privacy. Online: http:\/\/www.securiteam.com\/securityreviews\/5GP020A6LG.html, Feb. 2002."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.43"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/352600.352606"},{"key":"e_1_3_2_1_10_1","volume-title":"JavaScript: The Definitive Guide. O'Reilly","author":"Flannagan D.","year":"2006","unstructured":"}} D. Flannagan . JavaScript: The Definitive Guide. O'Reilly , fifth edition, Aug. 2006 . }}D.Flannagan. JavaScript: The Definitive Guide. O'Reilly, fifth edition, Aug. 2006."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.1982.10014"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1135777.1135884"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1135777.1135854"},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of W2SP 2010","author":"Janc A.","year":"2010","unstructured":"}} A. Janc and L. Olejnik . Feasibility and real-world implications of Web browser history detection. In C.Jackson, editor , Proceedings of W2SP 2010 . IEEE Computer Society , May 2010 . }}A.Janc and L.Olejnik. Feasibility and real-world implications of Web browser history detection. In C.Jackson, editor, Proceedings of W2SP 2010. IEEE Computer Society, May 2010."},{"key":"e_1_3_2_1_15_1","volume-title":"Rewriting-based dynamic information flow for JavaScript. Technical report","author":"Jang D.","year":"2010","unstructured":"}} D. Jang , R. Jhala , S. Lerner , and H. Shacham . Rewriting-based dynamic information flow for JavaScript. Technical report , University of California , San Diego , Jan. 2010 . Online: http:\/\/pho.ucsd.edu\/rjhala\/dif.pdf. }}D.Jang, R.Jhala, S.Lerner, and H.Shacham. Rewriting-based dynamic information flow for JavaScript. Technical report, University of California, San Diego, Jan. 2010. Online: http:\/\/pho.ucsd.edu\/rjhala\/dif.pdf."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242654"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89330-1_23"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1328408.1328410"},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of SEC 2010","author":"Magazinius J.","year":"2010","unstructured":"}} J. Magazinius , A. Russo , and A. Sabelfeld . On-the-fly inlining of dynamic security monitors. In K.Rannenberg and V.Varadharajan, editors , Proceedings of SEC 2010 , Sept. 2010 . }}J.Magazinius, A.Russo, and A.Sabelfeld. On-the-fly inlining of dynamic security monitors. In K.Rannenberg and V.Varadharajan, editors, Proceedings of SEC 2010, Sept. 2010."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.36"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31987-0_1"},{"key":"e_1_3_2_1_22_1","volume-title":"Proceedings of NDSS 2005","author":"Newsome J.","year":"2005","unstructured":"}} J. Newsome and D.X. Song . Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In D.Boneh and D.Simon, editors , Proceedings of NDSS 2005 . ISOC, Feb. 2005 . }}J.Newsome and D.X. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In D.Boneh and D.Simon, editors, Proceedings of NDSS 2005. ISOC, Feb. 2005."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/503272.503302"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of HotBots 2007","author":"Provos N.","year":"2007","unstructured":"}} N. Provos , D. McNamee , P. Mavrommatis , K. Wang , and N. Modadugu . The ghost in the browser: Analysis of Web-based malware. In N.Provos, editor , Proceedings of HotBots 2007 . USENIX, Apr. 2007 . }}N.Provos, D.McNamee, P.Mavrommatis, K.Wang, and N.Modadugu. The ghost in the browser: Analysis of Web-based malware. In N.Provos, editor, Proceedings of HotBots 2007. USENIX, Apr. 2007."},{"key":"e_1_3_2_1_25_1","series-title":"LNCS","first-page":"86","volume-title":"Proceedings of ESORICS","author":"Russo A.","year":"2009","unstructured":"}} A. Russo , A. Sabelfeld , and A. Chudnov . Tracking information flow in dynamic tree structures . In M.Backes and P.Ning, editors, Proceedings of ESORICS 2009 , volume 5789 of LNCS , pages 86 -- 103 . Springer-Verlag , Sept. 2009. }}A.Russo, A.Sabelfeld, and A.Chudnov. Tracking information flow in dynamic tree structures. In M.Backes and P.Ning, editors, Proceedings of ESORICS 2009, volume 5789 of LNCS, pages 86--103. Springer-Verlag, Sept. 2009."},{"key":"e_1_3_2_1_26_1","first-page":"201","volume-title":"Proceedings of USENIX Security 2001","author":"Shankar U.","year":"2001","unstructured":"}} U. Shankar , K. Talwar , J.S. Foster , and D. Wagner . Detecting format string vulnerabilities with type qualifiers. In D.Wallach, editor , Proceedings of USENIX Security 2001 , pages 201 -- 217 . USENIX, Aug. 2001 . }}U.Shankar, K.Talwar, J.S. Foster, and D.Wagner. Detecting format string vulnerabilities with type qualifiers. In D.Wallach, editor, Proceedings of USENIX Security 2001, pages 201--17. USENIX, Aug. 2001."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024404"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/11547662_24"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.31"},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of NDSS 2007","author":"Vogt P.","year":"2007","unstructured":"}} P. Vogt , F. Nentwich , N. Jovanovic , E. Kirda , C. Krugel , and G. Vigna . Cross site scripting prevention with dynamic data tainting and static analysis. In W.Arbaugh and C.Cowan, editors , Proceedings of NDSS 2007 . ISOC, Feb. 2007 . }}P.Vogt, F.Nentwich, N.Jovanovic, E.Kirda, C.Krugel, and G.Vigna. Cross site scripting prevention with dynamic data tainting and static analysis. In W.Arbaugh and C.Cowan, editors, Proceedings of NDSS 2007. ISOC, Feb. 2007."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/325694.325729"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190252"}],"event":{"name":"CCS '10: 17th ACM Conference on Computer and Communications Security 2010","location":"Chicago Illinois USA","acronym":"CCS '10","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 17th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866339","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1866307.1866339","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:09:07Z","timestamp":1750248547000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866339"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,10,4]]},"references-count":32,"alternative-id":["10.1145\/1866307.1866339","10.1145\/1866307"],"URL":"https:\/\/doi.org\/10.1145\/1866307.1866339","relation":{},"subject":[],"published":{"date-parts":[[2010,10,4]]},"assertion":[{"value":"2010-10-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}