The DOI matches its Crossref record; 12 of the 12 references it cites were found in a registry or an index.
TabShots: client-side detection of tabnabbing attacks
Open accessAbstract
As the web grows larger and larger and as the browser becomes the vehicle-of-choice for delivering many applications of daily use, the security and privacy of web users is under constant attack. Phishing is as prevalent as ever, with anti-phishing communities reporting thousands of new phishing campaigns each month. In 2010, tabnabbing, a variation of phishing, was introduced. In a tabnabbing attack, an innocuous-looking page, opened in a browser tab, disguises itself as the login page of a popular web application, when the user's focus is on a different tab. The attack exploits the trust of users for already opened pages and the user habit of long-lived browser tabs.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The cited source says what the claim attributes to it.
In the citing paper
“An example of these threats is the tabnabbing attack which consists of a fake web page that looks like the login page of a popular website usually visited by the victim, such as online banking, Facebook, or Twitter for example [33].”
From Social Engineering Attacks: A Survey (2019) · cites this paper as [33]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Dhamija, R., Tygar, J. D., & Hearst, M. (2006) · Proceedings of the SIGCHI Conference on Human Factors in Computing Systems · doi:10.1145/1124772.1124861 · Cited by 1,376
Yue, Z., Hong, J., & Cranor, L. F. (2007) · International World Wide Web Conference (WWW) · doi:10.1145/1242572.1242659 · Cited by 763
Egelman, S., Cranor, L. F., & Hong, J. (2008) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/1357054.1357219 · Cited by 610
Do security toolbars actually prevent phishing attacks?
Wu, M., Miller, R. C., & Garfinkel, S. (2006) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/1124772.1124863 · Cited by 565
Dhamija, R., & Tygar, J. D. (2005) · Symposium On Usable Privacy and Security · doi:10.1145/1073001.1073009 · Cited by 446
An empirical study of privacy-violating information flows in JavaScript web applications
Jang, D., Jhala, R., Lerner, S., et al. (2010) · Proceedings of the ACM Conference on Computer and Communications Security · doi:10.1145/1866307.1866339 · Cited by 173
Detection of phishing webpages based on visual similarity
Wenyin, L., Huang, G., Liu, X., et al. (2005) · doi:10.1145/1062745.1062868 · Cited by 162
Weinberg, Z., Chen, E. Y., Jayaraman, P. R., & Jackson, C. (2011) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2011.23 · Cited by 113
Masinter, L. M. (1998) · doi:10.17487/rfc2397 · Cited by 45
(2012) · International journal of scientific and technology research · Cited by 16
Research works printed but not linked: 1
- D. R. Sandler and D. S. Wallach . " input type="password" must die!" In Proceedings of W2SP 2008: Web 2.0 Security & Privacy 2008, Oakland , CA , May 2008 . D. R. Sandler and D. S. Wallach. "input type="password" must die!" In Proceedings of W2SP 2008: Web 2.0 Security & Privacy 2008, Oakland, CA, May 2008.
Cited by
Social Engineering Attacks: A Survey
Salahdine, F., & Kaabouch, N. (2019) · Future Internet · doi:10.3390/fi11040089 · Cited by 509
“An example of these threats is the tabnabbing attack which consists of a fake web page that looks like the login page of a popular website usually visited by the victim, such as online banking, Facebook, or Twitter for example [33].”
Background
Metadata
- Authors
- De Ryck, P., Nikiforakis, N., Desmet, L., & Joosen, W.
- Affiliations
- KU Leuven, Heverlee, Belgium
- KU Leuven (BE)
- Venue
- Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security
- Publisher
- ACM
- Published
- 2013-05-08
- Pages
- 447-456
- OpenAlex
- W2065255030
- Cited by
- 20
- References
- 12
- Citations by year
- 2023: 2 · 2020: 1 · 2019: 1 · 2018: 4 · 2017: 2 · 2016: 1 · 2015: 4 · 2014: 4 · 2013: 1
- FWCI
- 2.68
- Type
- conference paper
- Language
- en
- Open access
- green
- lirias.kuleuven.be
- Locations
- ACM Asia Conference on Computer and Communications Security (ASIA CCS) (publishedVersion)
- Lirias (submittedVersion, other-oa)
- Funders
- European Commission
- KU Leuven
- Topics
- Physical Sciences › Computer Science › Information Systems › Spam and Phishing Detection
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
- Keywords
- phishing, web application security, user trust
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
