{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:25:02Z","timestamp":1750307102706,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,11,11]],"date-time":"2012-11-11T00:00:00Z","timestamp":1352592000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["5.47E+26"],"award-info":[{"award-number":["5.47E+26"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006831","name":"U.S. Air Force","doi-asserted-by":"publisher","award":["FA9550-07-1-0532"],"award-info":[{"award-number":["FA9550-07-1-0532"]}],"id":[{"id":"10.13039\/100006831","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,11,11]]},"DOI":"10.1145\/2393596.2393599","type":"proceedings-article","created":{"date-parts":[[2012,11,13]],"date-time":"2012-11-13T15:04:07Z","timestamp":1352819047000},"page":"1-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Detecting and analyzing insecure component usage"],"prefix":"10.1145","author":[{"given":"Taeho","family":"Kwon","sequence":"first","affiliation":[{"name":"University of California, Davis"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhendong","family":"Su","sequence":"additional","affiliation":[{"name":"University of California, Davis"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,11,11]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"About URL Security Zones. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537183(v=vs.85).aspx.  About URL Security Zones. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537183(v=vs.85).aspx."},{"key":"e_1_3_2_1_2_1","unstructured":"Autodial. http:\/\/technet.microsoft.com\/en-us\/library\/cc781180(W.10).aspx.  Autodial. http:\/\/technet.microsoft.com\/en-us\/library\/cc781180(W.10).aspx."},{"key":"e_1_3_2_1_3_1","volume-title":"Usenix Security","author":"Bandhakavi S.","year":"2010","unstructured":"S. Bandhakavi , S. T. King , P. Madhusudan , and M. Winslett . Vex: vetting browser extensions for security vulnerabilities . In Usenix Security , 2010 . S. Bandhakavi, S. T. King, P. Madhusudan, and M. Winslett. Vex: vetting browser extensions for security vulnerabilities. In Usenix Security, 2010."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.3"},{"key":"e_1_3_2_1_5_1","volume-title":"NDSS","author":"Barth A.","year":"2009","unstructured":"A. Barth , A. P. Felt , P. Saxena , and A. Boodman . Protecting Browsers from Extension Vulnerabilities . In NDSS , 2009 . A. Barth, A. P. Felt, P. Saxena, and A. Boodman. Protecting Browsers from Extension Vulnerabilities. In NDSS, 2009."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455782"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1516046.1516066"},{"key":"e_1_3_2_1_8_1","volume-title":"Usenix Security","author":"Barth A.","year":"2009","unstructured":"A. Barth , J. Weinberger , and D. Song . Cross-origin javascript capability leaks: detection, exploitation, and defense . In Usenix Security , 2009 . A. Barth, J. Weinberger, and D. Song. Cross-origin javascript capability leaks: detection, exploitation, and defense. In Usenix Security, 2009."},{"key":"e_1_3_2_1_9_1","unstructured":"Browser Security Handbook. http:\/\/code.google.com\/p\/browsersec\/wiki\/Main.  Browser Security Handbook. http:\/\/code.google.com\/p\/browsersec\/wiki\/Main."},{"key":"e_1_3_2_1_10_1","volume-title":"Usenix Security","author":"Brumley D.","year":"2007","unstructured":"D. Brumley , J. Caballero , Z. Liang , N. James , and D. Song . Towards automatic discovery of deviations in binary implementations with applications to error detection and fingerprint generation . In Usenix Security , 2007 . D. Brumley, J. Caballero, Z. Liang, N. James, and D. Song. Towards automatic discovery of deviations in binary implementations with applications to error detection and fingerprint generation. In Usenix Security, 2007."},{"key":"e_1_3_2_1_11_1","unstructured":"CAPEC-104: Cross Zone Scripting. http:\/\/capec.mitre.org\/data\/definitions\/104.html.  CAPEC-104: Cross Zone Scripting. http:\/\/capec.mitre.org\/data\/definitions\/104.html."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/336512.336559"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.43"},{"key":"e_1_3_2_1_14_1","unstructured":"Enigma Browser. http:\/\/www.suttondesigns.com\/.  Enigma Browser. http:\/\/www.suttondesigns.com\/."},{"key":"e_1_3_2_1_15_1","unstructured":"Executable and Linkable Format (ELF). http:\/\/www.skyfree.org\/linux\/references\/ELF_Format.pdf.  Executable and Linkable Format (ELF). http:\/\/www.skyfree.org\/linux\/references\/ELF_Format.pdf."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"K. M. Goertzel T. Winograd and B. A. Hamilton. Safety and security considerations for component-based engineering of software-intensive systems. Technical report https:\/\/buildsecurityin.us-cert.gov\/swa\/downloads\/NAVSEA-Composition-DRAFT-061110.pdf 2010.  K. M. Goertzel T. Winograd and B. A. Hamilton. Safety and security considerations for component-based engineering of software-intensive systems. Technical report https:\/\/buildsecurityin.us-cert.gov\/swa\/downloads\/NAVSEA-Composition-DRAFT-061110.pdf 2010.","DOI":"10.2514\/6.2010-3332"},{"key":"e_1_3_2_1_17_1","unstructured":"Green Browser 5.8. http:\/\/greenbrowser.en.softonic.com\/.  Green Browser 5.8. http:\/\/greenbrowser.en.softonic.com\/."},{"key":"e_1_3_2_1_18_1","volume-title":"Web 2.0 Security and Privacy","author":"Grier C.","year":"2009","unstructured":"C. Grier , S. T. King , and D. S. Wallach . How I learned to stop worrying and love plugins . In Web 2.0 Security and Privacy , 2009 . C. Grier, S. T. King, and D. S. Wallach. How I learned to stop worrying and love plugins. In Web 2.0 Security and Privacy, 2009."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.19"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.36"},{"key":"e_1_3_2_1_21_1","unstructured":"IDA Pro Disassmelber. http:\/\/www.hex-rays.com\/idapro\/.  IDA Pro Disassmelber. http:\/\/www.hex-rays.com\/idapro\/."},{"key":"e_1_3_2_1_22_1","unstructured":"IDAPython. http:\/\/code.google.com\/p\/idapython\/.  IDAPython. http:\/\/code.google.com\/p\/idapython\/."},{"key":"e_1_3_2_1_23_1","unstructured":"IE Cross-site Scripting Filter. http:\/\/windows.microsoft.com\/en-US\/internet-explorer\/products\/ie-9\/features\/cross-site-scripting-filter.  IE Cross-site Scripting Filter. http:\/\/windows.microsoft.com\/en-US\/internet-explorer\/products\/ie-9\/features\/cross-site-scripting-filter."},{"key":"e_1_3_2_1_24_1","unstructured":"IE Tab 2. https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/ie-tab\/.  IE Tab 2. https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/ie-tab\/."},{"key":"e_1_3_2_1_25_1","unstructured":"IE Tab for Chrome. http:\/\/www.chromeextensions.org\/utilities\/ie-tab\/.  IE Tab for Chrome. http:\/\/www.chromeextensions.org\/utilities\/ie-tab\/."},{"key":"e_1_3_2_1_26_1","unstructured":"IE Tab for Firefox. https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/ie-tab\/.  IE Tab for Firefox. https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/ie-tab\/."},{"key":"e_1_3_2_1_27_1","unstructured":"IInternetSecurityManager::ProcessUrlAction Method. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537136(v=vs.85).aspx.  IInternetSecurityManager::ProcessUrlAction Method. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537136(v=vs.85).aspx."},{"key":"e_1_3_2_1_28_1","unstructured":"Internet Explorer Architecture. http:\/\/msdn.microsoft.com\/en-us\/library\/aa741312(28v=vs.85)29.aspx.  Internet Explorer Architecture. http:\/\/msdn.microsoft.com\/en-us\/library\/aa741312(28v=vs.85)29.aspx."},{"key":"e_1_3_2_1_29_1","unstructured":"Internet Explorer does not support user names and passwords in Web site addresses (HTTP or HTTPS URLs). http:\/\/support.microsoft.com\/kb\/834489.  Internet Explorer does not support user names and passwords in Web site addresses (HTTP or HTTPS URLs). http:\/\/support.microsoft.com\/kb\/834489."},{"key":"e_1_3_2_1_30_1","unstructured":"Internet Explorer Local Machine Zone Lockdown. http:\/\/technet.microsoft.com\/en-us\/library\/cc782928(WS.10).aspx.  Internet Explorer Local Machine Zone Lockdown. http:\/\/technet.microsoft.com\/en-us\/library\/cc782928(WS.10).aspx."},{"key":"e_1_3_2_1_31_1","unstructured":"Internet Explorer Zone Elevation Blocks. http:\/\/technet.microsoft.com\/en-us\/library\/cc757200(WS.10).aspx.  Internet Explorer Zone Elevation Blocks. http:\/\/technet.microsoft.com\/en-us\/library\/cc757200(WS.10).aspx."},{"key":"e_1_3_2_1_32_1","unstructured":"Introduction to Feature Controls. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537184(v=vs.85).aspx.  Introduction to Feature Controls. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537184(v=vs.85).aspx."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315298"},{"key":"e_1_3_2_1_34_1","volume-title":"Usenix Security","author":"Kirda E.","year":"2006","unstructured":"E. Kirda , C. Kruegel , G. Banks , G. Vigna , and R. A. Kemmerer . Behavior-based spyware detection . In Usenix Security , 2006 . E. Kirda, C. Kruegel, G. Banks, G. Vigna, and R. A. Kemmerer. Behavior-based spyware detection. In Usenix Security, 2006."},{"key":"e_1_3_2_1_35_1","unstructured":"T. Kwon and Z. Su. Automated detection and analysis of insecure component usage. Technical report http:\/\/www.cs.ucdavis.edu\/research\/tech-reports\/2011\/CSE-2012-25.pdf 2012.  T. Kwon and Z. Su. Automated detection and analysis of insecure component usage. Technical report http:\/\/www.cs.ucdavis.edu\/research\/tech-reports\/2011\/CSE-2012-25.pdf 2012."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"e_1_3_2_1_37_1","unstructured":"Lunascape 6. http:\/\/www.lunascape.tv\/.  Lunascape 6. http:\/\/www.lunascape.tv\/."},{"issue":"1","key":"e_1_3_2_1_38_1","first-page":"100","volume":"10","author":"Mckeeman W. M.","year":"1998","unstructured":"W. M. Mckeeman . Differential testing for software. Digital Technical Journal , 10 ( 1 ): 100 -- 107 , 1998 . W. M. Mckeeman. Differential testing for software. Digital Technical Journal, 10(1):100--107, 1998.","journal-title":"Digital Technical Journal"},{"key":"e_1_3_2_1_39_1","unstructured":"Microsoft Portable Executable and Common Object File Format Specification. http:\/\/www.microsoft.com\/whdc\/system\/platform\/firmware\/PECOFF.mspx.  Microsoft Portable Executable and Common Object File Format Specification. http:\/\/www.microsoft.com\/whdc\/system\/platform\/firmware\/PECOFF.mspx."},{"key":"e_1_3_2_1_40_1","unstructured":"Naming Files Paths and Namespaces. http:\/\/msdn.microsoft.com\/en-us\/library\/aa365247\\%28v=vs.85\\%29.aspx.  Naming Files Paths and Namespaces. http:\/\/msdn.microsoft.com\/en-us\/library\/aa365247\\%28v=vs.85\\%29.aspx."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315311"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030124"},{"key":"e_1_3_2_1_43_1","unstructured":"Slim Browser 5.01. http:\/\/www.slimbrowser.net\/en\/.  Slim Browser 5.01. http:\/\/www.slimbrowser.net\/en\/."},{"key":"e_1_3_2_1_44_1","unstructured":"SmartScreen Filter. http:\/\/windows.microsoft.com\/en-US\/internet-explorer\/products\/ie-9\/features\/smartscreen-filter.  SmartScreen Filter. http:\/\/windows.microsoft.com\/en-US\/internet-explorer\/products\/ie-9\/features\/smartscreen-filter."},{"key":"e_1_3_2_1_45_1","volume-title":"OSDI","author":"Tang S.","year":"2010","unstructured":"S. Tang , H. Mai , and S. T. King . Trust and protection in the illinois browser operating system . In OSDI , 2010 . S. Tang, H. Mai, and S. T. King. Trust and protection in the illinois browser operating system. In OSDI, 2010."},{"key":"e_1_3_2_1_46_1","unstructured":"Top 10 Chrome Browser Add-ons. http:\/\/www.pcworld.com\/article\/185744\/top_10_chrome_browser_addons.html.  Top 10 Chrome Browser Add-ons. http:\/\/www.pcworld.com\/article\/185744\/top_10_chrome_browser_addons.html."},{"key":"e_1_3_2_1_47_1","unstructured":"Trident (layout engine). http:\/\/en.wikipedia.org\/wiki\/Trident_(layout_engine).  Trident (layout engine). http:\/\/en.wikipedia.org\/wiki\/Trident_(layout_engine)."},{"key":"e_1_3_2_1_48_1","unstructured":"Understanding User-Agent Strings. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537503(v=vs.85).aspx.  Understanding User-Agent Strings. http:\/\/msdn.microsoft.com\/en-us\/library\/ms537503(v=vs.85).aspx."},{"key":"e_1_3_2_1_49_1","unstructured":"UTF-8. http:\/\/en.wikipedia.org\/wiki\/UTF-8.  UTF-8. http:\/\/en.wikipedia.org\/wiki\/UTF-8."},{"key":"e_1_3_2_1_50_1","volume-title":"Usenix Security","author":"Wang H.","year":"2009","unstructured":"H. Wang , C. Grier , A. Moshchuk , S. King , P. Choudhury , and H. Venter . The multi-principal OS construction of the Gazelle web browser . In Usenix Security , 2009 . H. Wang, C. Grier, A. Moshchuk, S. King, P. Choudhury, and H. Venter. The multi-principal OS construction of the Gazelle web browser. In Usenix Security, 2009."},{"key":"e_1_3_2_1_51_1","unstructured":"WebbIE 3.14. http:\/\/www.webbie.org.uk\/.  WebbIE 3.14. http:\/\/www.webbie.org.uk\/."},{"key":"e_1_3_2_1_52_1","volume-title":"Black Hat DC","author":"Whitehouse O.","year":"2007","unstructured":"O. Whitehouse . GS and ASLR in Windows Vista . In Black Hat DC , 2007 . O. Whitehouse. GS and ASLR in Windows Vista. In Black Hat DC, 2007."},{"key":"e_1_3_2_1_53_1","unstructured":"You receive a \"File Not Found\" error message in Excel when you open a file by double-clicking the file name. http:\/\/support.microsoft.com\/kb\/207574.  You receive a \"File Not Found\" error message in Excel when you open a file by double-clicking the file name. http:\/\/support.microsoft.com\/kb\/207574."}],"event":{"name":"SIGSOFT\/FSE'12: 20th ACM SIGSOFT Symposium on the Foundations of Software Engineering","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"],"location":"Cary North Carolina","acronym":"SIGSOFT\/FSE'12"},"container-title":["Proceedings of the ACM SIGSOFT 20th International Symposium on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2393596.2393599","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2393596.2393599","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:34:55Z","timestamp":1750239295000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2393596.2393599"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,11,11]]},"references-count":53,"alternative-id":["10.1145\/2393596.2393599","10.1145\/2393596"],"URL":"https:\/\/doi.org\/10.1145\/2393596.2393599","relation":{},"subject":[],"published":{"date-parts":[[2012,11,11]]},"assertion":[{"value":"2012-11-11","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}