{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T08:23:03Z","timestamp":1792743783596,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":47,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100006435","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1934597"],"award-info":[{"award-number":["CNS-1934597"]}],"id":[{"id":"10.13039\/100006435","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["FA8650-18-C-7880"],"award-info":[{"award-number":["FA8650-18-C-7880"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3417271","type":"proceedings-article","created":{"date-parts":[[2020,11,2]],"date-time":"2020-11-02T18:27:02Z","timestamp":1604341622000},"page":"507-519","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":28,"title":["Fill in the Blanks"],"prefix":"10.1145","author":[{"given":"Xu","family":"Lin","sequence":"first","affiliation":[{"name":"University of Illinois at Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Panagiotis","family":"Ilia","sequence":"additional","affiliation":[{"name":"University of Illinois at Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jason","family":"Polakis","sequence":"additional","affiliation":[{"name":"University of Illinois at Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Google chrome privacy whitepaper. https:\/\/www.google.com\/chrome\/privacy\/whitepaper.html.  Google chrome privacy whitepaper. https:\/\/www.google.com\/chrome\/privacy\/whitepaper.html."},{"key":"e_1_3_2_2_2_1","unstructured":"Google developers - help users checkout faster with autofill. https:\/\/developers.google.com\/web\/updates\/2015\/06\/checkout-faster-with-autofill.  Google developers - help users checkout faster with autofill. https:\/\/developers.google.com\/web\/updates\/2015\/06\/checkout-faster-with-autofill."},{"key":"e_1_3_2_2_3_1","unstructured":"Google developers - help users checkout faster with autofill. https:\/\/developers.google.com\/web\/updates\/2015\/06\/checkout-faster-with-autofill.  Google developers - help users checkout faster with autofill. https:\/\/developers.google.com\/web\/updates\/2015\/06\/checkout-faster-with-autofill."},{"key":"e_1_3_2_2_4_1","unstructured":"Mozilla firefox features. https:\/\/wiki.mozilla.org\/Firefox\/Features\/Form_Autofill#Feature_Availability.  Mozilla firefox features. https:\/\/wiki.mozilla.org\/Firefox\/Features\/Form_Autofill#Feature_Availability."},{"key":"e_1_3_2_2_5_1","unstructured":"Preview demo: Desktop 100k credit card values. https:\/\/vimeo.com\/412514626\/fb485212ad.  Preview demo: Desktop 100k credit card values. https:\/\/vimeo.com\/412514626\/fb485212ad."},{"key":"e_1_3_2_2_6_1","unstructured":"Preview demo: Laptop 100k email address values. https:\/\/vimeo.com\/412447440\/e753a2cf4c.  Preview demo: Laptop 100k email address values. https:\/\/vimeo.com\/412447440\/e753a2cf4c."},{"key":"e_1_3_2_2_7_1","unstructured":"Preview demo: Multiple autofill accounts. https:\/\/vimeo.com\/414161536\/c3a9e00f1c.  Preview demo: Multiple autofill accounts. https:\/\/vimeo.com\/414161536\/c3a9e00f1c."},{"key":"e_1_3_2_2_8_1","unstructured":"The guardian - browser autofill used to steal personal details in new phishing attack 2017. https:\/\/www.theguardian.com\/technology\/2017\/jan\/10\/browser-autofill-used-to-steal-personal-details-in-new-phising-attack-chrome-safari.  The guardian - browser autofill used to steal personal details in new phishing attack 2017. https:\/\/www.theguardian.com\/technology\/2017\/jan\/10\/browser-autofill-used-to-steal-personal-details-in-new-phising-attack-chrome-safari."},{"key":"e_1_3_2_2_9_1","volume-title":"https:\/\/html.spec.whatwg.org\/multipage\/form-control-infrastructure.html#attr-fe-autocomplete","author":"Living HTML","year":"2020"},{"key":"e_1_3_2_2_10_1","unstructured":"Http archive - state of the web 2020. https:\/\/httparchive.org\/reports\/state-of-the-web.  Http archive - state of the web 2020. https:\/\/httparchive.org\/reports\/state-of-the-web."},{"key":"e_1_3_2_2_11_1","unstructured":"Mailchimp - troubleshooting the embedded signup form 2020. https:\/\/mailchimp.com\/help\/troubleshooting-the-embedded-signup-form\/.  Mailchimp - troubleshooting the embedded signup form 2020. https:\/\/mailchimp.com\/help\/troubleshooting-the-embedded-signup-form\/."},{"key":"e_1_3_2_2_12_1","unstructured":"Maxmind db 2020. https:\/\/www.maxmind.com\/en\/geoip2-city.  Maxmind db 2020. https:\/\/www.maxmind.com\/en\/geoip2-city."},{"key":"e_1_3_2_2_13_1","unstructured":"Nyc department of planning 2020. https:\/\/www1.nyc.gov\/site\/planning\/data-maps\/open-data.page#snd.  Nyc department of planning 2020. https:\/\/www1.nyc.gov\/site\/planning\/data-maps\/open-data.page#snd."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0070"},{"key":"e_1_3_2_2_15_1","first-page":"257","volume-title":"Presented as part of the 22nd USENIX Security Symposium (USENIX Security 13)","author":"Akhawe Devdatta","year":"2013"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2015.05.005"},{"key":"e_1_3_2_2_17_1","volume-title":"Max Van Kleek, and Nigel Shadbolt. Measuring third-party tracker power across web and mobile. ACM Transactions on Internet Technology (TOIT), 18(4):1--22","author":"Binns Reuben","year":"2018"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2016.2637878"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23152"},{"key":"e_1_3_2_2_20_1","first-page":"91","volume-title":"Computer Security","author":"Chatzimpyrros Manolis","year":"2019"},{"key":"e_1_3_2_2_21_1","volume-title":"Hackers' malicious script skimmed credit card details off robert dyas website","author":"Cluley Graham","year":"2020"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376600"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978313"},{"key":"e_1_3_2_2_24_1","unstructured":"Gunes Acar. Freedom To Tinker - No boundaries for user identities: Web trackers exploit browser login managers. https:\/\/freedom-to-tinker.com\/2017\/12\/27\/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers\/ 2017.  Gunes Acar. Freedom To Tinker - No boundaries for user identities: Web trackers exploit browser login managers. https:\/\/freedom-to-tinker.com\/2017\/12\/27\/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers\/ 2017."},{"key":"e_1_3_2_2_25_1","volume-title":"Anatomy of a credit card","author":"Harkness Brendan","year":"2020"},{"key":"e_1_3_2_2_26_1","first-page":"641","volume-title":"23rd USENIX Security Symposium (USENIX Security 14)","author":"Kapravelos Alexandros","year":"2014"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24383"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.57"},{"key":"e_1_3_2_2_29_1","volume-title":"Wpforms blog - online form statistics & facts for","author":"Liedke Lindsay","year":"2020"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133987"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359183"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39498-0_9"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2556288.2557265"},{"key":"e_1_3_2_2_34_1","volume-title":"Stolen credit card numbers","author":"Sekar Anisha","year":"2015"},{"key":"e_1_3_2_2_35_1","volume-title":"Proceedings of the 23rd USENIX Conference on Security Symposium (USENIX Security 14), SEC'14, USA","author":"Silver David","year":"2014"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.37"},{"key":"e_1_3_2_2_37_1","volume-title":"The urlephant in the room","author":"Stark Emily","year":"2019"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0028"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.18"},{"key":"e_1_3_2_2_40_1","unstructured":"Steven Englehardt. Freedom To Tinker - No boundaries: Exfiltration of personal data by session-replay scripts. https:\/\/freedom-to-tinker.com\/2017\/11\/15\/no-boundaries-exfiltration-of-personal-data-by-session-replay-scripts\/ 2017.  Steven Englehardt. Freedom To Tinker - No boundaries: Exfiltration of personal data by session-replay scripts. https:\/\/freedom-to-tinker.com\/2017\/11\/15\/no-boundaries-exfiltration-of-personal-data-by-session-replay-scripts\/ 2017."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590336"},{"key":"e_1_3_2_2_42_1","first-page":"1715","volume-title":"28th USENIX Security Symposium USENIX Security 19)","author":"Thompson Christopher","year":"2019"},{"key":"e_1_3_2_2_43_1","first-page":"1679","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Trickel Erik","year":"2019"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380203"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354212"},{"key":"e_1_3_2_2_46_1","first-page":"941","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Zhang Mingxue","year":"2019"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3270101.3270104"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417271","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3417271","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3417271","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:01:31Z","timestamp":1750197691000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417271"}},"subtitle":["Empirical Analysis of the Privacy Threats of Browser Form Autofill"],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":47,"alternative-id":["10.1145\/3372297.3417271","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3417271","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}