{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:16:59Z","timestamp":1783009019081,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3656999","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"769-784","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["FakeX: A Framework for Detecting Fake Reviews of Browser Extensions"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0465-2925","authenticated-orcid":false,"given":"Eric","family":"Olsson","sequence":"first","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0553-3597","authenticated-orcid":false,"given":"Benjamin","family":"Eriksson","sequence":"additional","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0303-3858","authenticated-orcid":false,"given":"Pablo","family":"Picazo-Sanchez","sequence":"additional","affiliation":[{"name":"School of Information Technology, Halmstad University, Halmstad, Sweden"},{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-9812-2165","authenticated-orcid":false,"given":"Lukas","family":"Andersson","sequence":"additional","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9344-9058","authenticated-orcid":false,"given":"Andrei","family":"Sabelfeld","sequence":"additional","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2018.00012"},{"key":"e_1_3_2_1_2_1","volume-title":"Research in Attacks, Intrusions, and Defenses, Fabian Monrose, Marc Dacier, Gregory Blanc, and Joaquin Garcia-Alfaro (Eds.)","author":"Arshad Sajjad","unstructured":"Sajjad Arshad, Amin Kharraz, and William Robertson. 2016. Identifying Extension-Based Ad Injection via Fine-Grained Web Content Provenance. In Research in Attacks, Intrusions, and Defenses, Fabian Monrose, Marc Dacier, Gregory Blanc, and Joaquin Garcia-Alfaro (Eds.). Springer International Publishing, Cham, 415--436."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1038\/nature03459"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2019.03.002"},{"key":"e_1_3_2_1_5_1","volume-title":"ST-DBSCAN: An algorithm for clustering spatial-temporal data. Data & knowledge engineering 60, 1","author":"Birant Derya","year":"2007","unstructured":"Derya Birant and Alp Kut. 2007. ST-DBSCAN: An algorithm for clustering spatial-temporal data. Data & knowledge engineering 60, 1 (2007), 208--221."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243823"},{"key":"e_1_3_2_1_7_1","unstructured":"Chrome Extensions Stats. 2023. https:\/\/chrome-stats.com\/t\/extension"},{"key":"e_1_3_2_1_8_1","unstructured":"Paul Ducklin. 2020. Anatomy of a survey scam - how innocent questions can rip you off. https:\/\/news.sophos.com\/en-us\/2020\/06\/22\/anatomy-of-a-survey-scam-how-innocent-questions-can-rip-you-off\/"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477314.3507098"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-020-01761-w"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359813"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484745"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484745"},{"key":"e_1_3_2_1_14_1","volume-title":"Warning: Fake one-star reviews & ratings are bombarding FreeAddon extensions! https:\/\/web.archive.org\/web\/20180929105259\/https:\/\/freeaddon.com\/fake-1-star-ratings-reviews-attack-by-hackers\/","year":"2018","unstructured":"FreeAddon. 2018. Warning: Fake one-star reviews & ratings are bombarding FreeAddon extensions! https:\/\/web.archive.org\/web\/20180929105259\/https:\/\/freeaddon.com\/fake-1-star-ratings-reviews-attack-by-hackers\/"},{"key":"e_1_3_2_1_15_1","unstructured":"GetReview. 2024. SEO Agency\/Company London UK | Digital Marketing Agency in High Wycombe. https:\/\/getreview.co.uk."},{"key":"e_1_3_2_1_16_1","unstructured":"Review GG. 2022. Buy positive reviews online at cheap prices on review community. https:\/\/reviewgg.com\/."},{"key":"e_1_3_2_1_17_1","unstructured":"Google. 2023. Chrome Web Store. https:\/\/chromewebstore.google.com\/"},{"key":"e_1_3_2_1_18_1","unstructured":"Google Developers. 2022. Spam and Abuse. https:\/\/developer.chrome.com\/docs\/webstore\/program-policies\/spam-and-abuse\/."},{"key":"e_1_3_2_1_19_1","unstructured":"Google Developers. 2022. Spam policy FAQ. https:\/\/developer.chrome.com\/docs\/webstore\/spam-faq\/#ratings-and-reviews."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-020-04757-2"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2016.02.004"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.2211932119"},{"key":"e_1_3_2_1_23_1","unstructured":"Yelp Inc. 2024. Yelp Open Dataset. https:\/\/www.yelp.com\/dataset."},{"key":"e_1_3_2_1_24_1","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Jagpal Nav","year":"2015","unstructured":"Nav Jagpal, Eric Dingle, Jean-Philippe Gravel, Panayiotis Mavrommatis, Niels Provos, Moheeb Abu Rajab, and Kurt Thomas. 2015. Trends and Lessons from Three Years Fighting Malicious Extensions. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, D.C., 579--593. https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/jagpal"},{"key":"e_1_3_2_1_25_1","volume-title":"Hulk: Eliciting Malicious Behavior in Browser Extensions. In 23rd USENIX Security Symposium (USENIX Security 14)","author":"Kapravelos Alexandros","year":"2014","unstructured":"Alexandros Kapravelos, Chris Grier, Neha Chachra, Christopher Kruegel, Giovanni Vigna, and Vern Paxson. 2014. Hulk: Eliciting Malicious Behavior in Browser Extensions. In 23rd USENIX Security Symposium (USENIX Security 14). USENIX Association, San Diego, CA, 641--654. https:\/\/www.usenix.org\/conference\/usenixsecurity14\/technical-sessions\/presentation\/kapravelos"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.5555\/2070671.2070678"},{"key":"e_1_3_2_1_27_1","unstructured":"Brian Krebs. 2021. Using Fake Reviews to Find Dangerous Extensions. https:\/\/krebsonsecurity.com\/2021\/05\/using-fake-reviews-to-find-dangerous-extensions\/"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2014.47"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/EMR.2019.2928964"},{"key":"e_1_3_2_1_30_1","volume-title":"Understanding and using linear programming","author":"Matou\u0161ek Ji\u0159\u00ed","unstructured":"Ji\u0159\u00ed Matou\u0161ek and Bernd G\u00e4rtner. 2007. Understanding and using linear programming. Vol. 33. Springer, New York, NY, USA."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3075573"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2187836.2187863"},{"key":"e_1_3_2_1_33_1","unstructured":"Arjun Mukherjee Vivek Venkataraman Bing Liu Natalie Glance et al. 2013. Fake review detection: Classification and analysis of real and pseudo reviews. UIC-CS-03-2013. Technical Report (2013)."},{"key":"e_1_3_2_1_34_1","volume-title":"Amazon Review Data","author":"Jianmo Ni.","year":"2018","unstructured":"Jianmo Ni. 2018. Amazon Review Data (2018). https:\/\/nijianmo.github.io\/amazon\/."},{"key":"e_1_3_2_1_35_1","unstructured":"Wladimir Palant. 2023. How malicious extensions hide running arbitrary code. https:\/\/palant.info\/2023\/06\/02\/how-malicious-extensions-hide-running-arbitrary-code\/."},{"key":"e_1_3_2_1_36_1","unstructured":"Wladimir Palant. 2023. More malicious extensions in Chrome Web Store. https:\/\/palant.info\/2023\/05\/31\/more-malicious-extensions-in-chrome-web-store\/."},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the 2020 ACM SIGSAC conference on computer and communications security. Association for Computing Machinery","author":"Pantelaios Nikolaos","year":"2020","unstructured":"Nikolaos Pantelaios, Nick Nikiforakis, and Alexandros Kapravelos. 2020. You've changed: Detecting malicious browser extensions through their update deltas. In Proceedings of the 2020 ACM SIGSAC conference on computer and communications security. Association for Computing Machinery, New York, NY, USA, 477--491."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3564625.3567988"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3023376"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2021.3085406"},{"key":"e_1_3_2_1_41_1","unstructured":"The Menlo Report. 2012. The Menlo Report. https:\/\/www.dhs.gov\/sites\/default\/files\/publications\/CSD-MenloPrinciplesCORE-20120803_1.pdf."},{"key":"e_1_3_2_1_42_1","unstructured":"Get Reviews. 2020. Get Reviews. https:\/\/getreviews.buzz\/."},{"key":"e_1_3_2_1_43_1","volume-title":"NDSS workshop on usable security","volume":"10","author":"Schaub Florian","year":"2016","unstructured":"Florian Schaub, Aditya Marella, Pranshu Kalvani, Blase Ur, Chao Pan, Emily Forney, and Lorrie Faith Cranor. 2016. Watching them watching me: Browser extensions' impact on user privacy awareness and concern. In NDSS workshop on usable security, Vol. 10. The Internet Society, Reston, Virginia, U.S."},{"key":"e_1_3_2_1_44_1","unstructured":"ShadowWhisperer. 2023. Malware. https:\/\/github.com\/ShadowWhisperer\/BlockLists\/blob\/master\/Lists\/Malware."},{"key":"e_1_3_2_1_45_1","volume-title":"Chrome Policy Benjamin Ackerman, and Anti-Abuse Team","author":"Soares Rebecca","year":"2020","unstructured":"Rebecca Soares, Chrome Policy Benjamin Ackerman, and Anti-Abuse Team. 2020. Keeping spam off the chrome web store. https:\/\/blog.chromium.org\/2020\/04\/keeping-spam-off-chrome-web-store.html"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00058"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313458"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","unstructured":"Oleksii Starov and Nick Nikiforakis. 2017. Extended Tracking Powers: Measuring the Privacy Diffusion Enabled by Browser Extensions. In Proceedings of the 26th International Conference on World Wide Web (Perth Australia) (WWW '17). International World Wide Web Conferences Steering Committee Republic and Canton of Geneva CHE 1481--1490. 10.1145\/3038912.3052596","DOI":"10.1145\/3038912.3052596"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.18"},{"key":"e_1_3_2_1_50_1","unstructured":"Buy Review Store. 2024. Provide Online Reviews Marketing Five Star Rating & Reviews Services. https:\/\/buyreviewstore.com."},{"key":"e_1_3_2_1_51_1","unstructured":"Review Sub. 2022. Free or Buy Google Reviews Amazon Reviews & more. https:\/\/www.reviewsub.com\/."},{"key":"e_1_3_2_1_52_1","unstructured":"Buy Smm World. 2024. Buy Smm World - Digital Marketing And Reviews Service Provider. https:\/\/buysmmworld.com."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616584"}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","location":"Singapore Singapore","acronym":"ASIA CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3656999","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:07Z","timestamp":1750290247000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3656999"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":53,"alternative-id":["10.1145\/3634737.3656999","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3656999","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}