1

SoK: State of the Krawlers - Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements

The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web

From Attachments to SEO: Click Here to Learn More about Clickbait PDFs!

It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses

The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web

The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies

Black Widow: Blackbox Data-driven Web Scanning

JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals

Where We Stand (or Fall): An Analysis of CSRF Defenses in Web Frameworks

Automatic Uncovering of Hidden Behaviors from Input Validation in Mobile Apps