The DOI matches its Crossref record; 33 of the 37 references it cites were found in a registry or an index.
An Integrated Vulnerability Assessment ofElectronic Commerce Websites
Open accessAbstract
This paper examines the security issues on electronic commerce websites in Ghana using technical and nontechnical procedures. The study assessed e-commerce websites for the security tools employed to protect user data and other related privacy issues on the websites. It also analyzed e-commerce websites for encryption security tools that protect customer data and test e-commerce websites for the presence of security vulnerabilities that could threaten the security of the sites and their users using w3af. The study used a combination of three methods; web content analysis, information security audit and testing of the websites using w3af, a vulnerability assessment tool. Web application attack and audit framework (w3af) was used to test and identify possible vulnerabilities on the e-commerce websites that could be used by malicious users to steal customer data for fraudulent intent. The research focused to reveal the security vulnerabilities present on e-commerce websites that could affect the trust of clients, the satisfaction of clients, and patronage of e-commerce services by customers. The study found credit card number disclosures, full path disclosures vulnerabilities, cross-site request forgery vulnerabilities and social security number exposures of clients on the e-commerce websites. These security weaknesses in these e-commerce websites have been highlighted as findings in the study that would inform policy direction on electronic data collection, protection and use…
Overview
AI snapshot
Written from the paper’s full text.
TL;DR
This study assessed security weaknesses in 15 Ghanaian e-commerce websites using manual checks and w3af scanning, then mapped findings to OWASP Top 10 2017. It reports common vulnerabilities including full path disclosure, CSRF, social security number exposure, and credit card number exposure, and proposes fixes and shopper precautions.
Key findings
- w3af found full path disclosure on 53% (8/15), CSRF on 40% (6/15), social security number exposure on 33% (5/15), and credit card number disclosure on 27% (4/15) of sampled sites.
- The scan also flagged POST-to-GET method exchange and CSRF-related messages, indicating sensitive data could be exposed in URLs or forged requests.
- These weaknesses were classified under OWASP Top 10 2017 categories, especially sensitive data exposure and CSRF, and the authors argue they threaten customer trust and data safety.
Methods
- Mixed qualitative/quantitative exploratory and experimental design; sample of 15 active e-commerce websites in Ghana.
- Manual web content analysis checked for HTTPS/padlock, certificate issuer, and validity; w3af scanned each site using audit, bruteforce, and grep plugins.
- Identified vulnerabilities were manually risk-rated against OWASP Top 10 2017.
Limitations
- The paper does not explicitly state limitations.
- Evident from the text: the sample is only 15 Ghanaian sites, so findings may not generalize; the assessment is a point-in-time scan dependent on w3af and manual classification, with no longitudinal or broader validation reported.
- Evident from the text: no detailed statistical modeling or confidence estimates are presented; results are descriptive percentages and screenshots.
Model-written summary. Check it against the paper before relying on it.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
- Findingown data
The study found full path disclosure vulnerabilities on e-commerce websites in Ghana.
“The study found credit card number disclosures, full path disclosures vulnerabilities, cross-site request forgery vulnerabilities and social security number exposures of clients on the e-commerce websites.”
Quote in the paperSubstantial claim - Findingown data
The study found cross-site request forgery vulnerabilities on e-commerce websites in Ghana.
“The study found credit card number disclosures, full path disclosures vulnerabilities, cross-site request forgery vulnerabilities and social security number exposures of clients on the e-commerce websites.”
Quote in the paperSubstantial claim - Findingown data
CSRF/XSRF vulnerability was identified on 40% of the e-commerce websites.
“CSRF/XSRF was identified on forty percent (40%) of the e-commerce websites.”
Quote in the paperNot a substantial claim - Findingown data
Full Path Disclosure vulnerability was present in 53% of the websites.
“w3af revealed that this vulnerability was present in fifty-three percent (53%) of the websites.”
Quote in the paperNot a substantial claim - Findingown data
The w3af results indicated that the URL is vulnerable to cross site request forgery.
“The results indicated statements:”
Quote in the paperNot a substantial claim
- Findingown data
The study found credit card number disclosures on e-commerce websites in Ghana.
“The study found credit card number disclosures, full path disclosures vulnerabilities, cross-site request forgery vulnerabilities and social security number exposures of clients on the e-commerce websites.”
Quote in the paperSubstantial claim - Findingown data
Credit Card Number Disclosure vulnerability was identified in 27% of the e-commerce websites.
“This security vulnerability was identified in twenty-seven percent (27%) of the e-commerce websites.”
Quote in the paperNot a substantial claim - Findingown data
The study found social security number exposures of clients on e-commerce websites in Ghana.
“The study found credit card number disclosures, full path disclosures vulnerabilities, cross-site request forgery vulnerabilities and social security number exposures of clients on the e-commerce websites.”
Quote in the paperSubstantial claim - Findingown data
The web application audit and attack framework (w3af) identified vulnerabilities that could compromise the safety of user data in the e-commerce websites.
“The web application audit and attack framework (w3af) identified vulnerabilities that could compromise the safety of user data in the e-commerce websites.”
Quote in the paperSubstantial claim - Interpretationown data
These vulnerabilities make e-commerce websites in Ghana unsecure for customers to trust their private data into their care.
“The major significance of the study is the fact that majority of the electronic commerce websites have a lot of vulnerabilities making them unsecure for customers to trust their private data into their care.”
Quote in the paperSubstantial claim- Rests on an assumption: The e-commerce websites assessed are representative of e-commerce websites in Ghana.
- Interpretationown data
From the findings, customers risk having their personal and credit or debit card details stolen by hackers on e-commerce websites with vulnerabilities due to software defects, system defects and configuration defects or flaws.
“From the findings, customers risk having their personal and credit or debit card details stolen by hackers on ecommerce websites with vulnerabilities due to software defects, system defects and configuration defects or flaws.”
Quote in the paperSubstantial claim - Interpretationown data
The majority of e-commerce websites in Ghana have many vulnerabilities.
“The major significance of the study is the fact that majority of the electronic commerce websites have a lot of vulnerabilities making them unsecure for customers to trust their private data into their care.”
Quote in the paperSubstantial claim- Rests on an assumption: The e-commerce websites assessed are representative of e-commerce websites in Ghana.
- Interpretationown data§ An Integrated Vulnerability Assessment of Electronic Commerce Websites
Customers who shop on these e-commerce websites risk their credit/debit card information and personal details.
“Customers who shop on these e-commerce websites risk their credit/debit card information and personal details.”
Quote in the paperSubstantial claim
- Probably not a substantial claim. 1
Probably not a substantial claim. The authors may not put it forward as true. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.
Findingnone givenThe w3af results indicated that attackers can exchange the method from POST to GET when sending data to the server.
“and”
Quote in the paperNot a substantial claim
The paper relies on this without support.
The e-commerce websites assessed are representative of e-commerce websites in Ghana.
“A number of these websites were assessed for encryption security tools and the availability of security vulnerabilities that could affect users' privacy and security.”
The paper relies on this without support.
Security and privacy are leading factors for establishing and maintaining customer trust in e-commerce.
“Security and privacy are leading factors for establishing and maintaining customer trust among others in the electronic commerce industry.”
The paper relies on this without support.
Investments in customer privacy protection increase customers' spend, trustworthiness, and loyalty.
“Customer privacy is an integral part of electronic commerce strategies and investments in privacy protection and has shown to increase customers' spend, trustworthiness, and loyalty.”
The paper relies on this without support.
The GET method causes data sent to be part of the URL.
“The GET method causes data sent to be part of the URL.”
The paper relies on this without support.
Sensitive information and passwords sent via GET are visible to everyone in the URL.
“Sensitive information and passwords sent are visible to everyone in the URL.”
The paper relies on this without support.
CSRF forces the browser of a logged-on victim to send a forged HTTP request together with a session cookie and other automatically included authentication information to a vulnerable web application.
“CSRF forces the browser of a logged-on victim to send a forged HTTP request together with a session cookie and others automatically included authentication information to a vulnerable web application.”
The paper relies on this without support.
A successful CSRF attack can force ordinary users to transfer funds and change an email address.
“A successful CSRF attack can force ordinary users to transfer funds and change an email address.”
The paper relies on this without support.
With administrative account users, the entire web application system can be compromised.
“With administrative account users, the entire web application system can be compromised.”
The paper relies on this without support.
Full Path Disclosure enables the attacker to see the path to the webroot/file.
“This vulnerability enables the attacker to see the path to the webroot/file.”
The paper relies on this without support.
w3af can identify almost all web application vulnerabilities using more than 130 plugins to scan target websites.
“Web Application Attack and Audit Framework (w3af) can identify almost all web application vulnerabilities using more than 130 plugins to scan target websites.”
The paper relies on this without support.
w3af can exploit SQL injection, OS commanding, remote and local file inclusion, XSS and unsafe file uploads.
“It can exploit SQL injection, OS commanding, remote and local file inclusion, XSS and unsafe file uploads.”
The paper relies on this without support.
The rapid changes in web application require a newer approach of combining a manual and automation penetration testing.
“The rapid changes in web application require a newer approach of combining a manual and automation penetration testing.”
The paper relies on this without support.
In-depth manual and automated penetration testing as used in this study has the benefit of improving security knowledge, extend the depth and coverage of test.
“In-depth manual and automated penetration testing as used in this study has the benefit of improving security knowledge, extend the depth and coverage of test.”
The paper relies on this without support.
Encrypted websites provide the safest condition for online shopping.
“Encrypted websites provide the safest condition for online shopping.”
The paper relies on this without support.
Most public Wi-Fi hotspots do not encrypt data and information can easily be picked on them.
“Most public Wi-Fi hotspots do not encrypt data and information can easily be picked on them.”
The paper relies on this without support.
These two methods (manual and automated penetration testing) have proven not to be mutually exclusive.
“These two methods have proven not to be mutually exclusive.”
The paper relies on this without support.
Social Security Numbers could be used in identity theft by attackers.
“Social Security Numbers could be used in identity theft by attackers.”
The paper relies on this without support.
Many organizations such as government institutions, medical facilities and financial agencies use Social Security as their primary identifier in record-keeping applications.
“Many organizations such as government institutions, medical facilities and financial agencies use Social Security as their primary identifier in record-keeping applications.”
The paper relies on this without support.
The impact of a security breach on e-businesses is heavy as systems could be hijacked, customer data stolen or entire database deleted.
“The impact of a security breach on e-businesses is heavy as systems could be hijacked, customer data stolen or entire database deleted.”
Citations
Cites
The Transport Layer Security (TLS) Protocol Version 1.2
Dierks, T., & Rescorla, E. K. (2008) · doi:10.17487/rfc5246 · Cited by 1,577 · cited 1×
“According to [14] the Transport Layer Security (TLS) protocol is a successor to Secure Socket Layer (SSL).”
BackgroundTurner, S. (2014) · IEEE Internet Computing · doi:10.1109/mic.2014.126 · Cited by 473 · cited 1×
“Though the complexities and operations of SSL protocol are invisible to customers, their browsers would provide a lock icon to indicate that their data is protected by an SSL encrypted session [13].”
BackgroundStatic detection of cross-site scripting vulnerabilities
Wassermann, G., & Su, Z. (2008) · doi:10.1145/1368088.1368112 · Cited by 385 · cited 2×
“However, security vulnerabilities continue to exist due to the developer’s lack of understanding of the problem and their unfamiliarity with current guarding strengths and limitations [25].”
BackgroundTesting and Comparing Web Vulnerability Scanning Tools for SQL Injection and XSS Attacks
Fonseca, J., Vieira, M. P. A., & Madeira, H. (2007) · Pacific Rim International Symposium on Dependable Computing · doi:10.1109/prdc.2007.55 · Cited by 159 · cited 1×
“XSS flaws aid attackers to run in the browsers of victims resulting in user sessions hijack, website defacement, or redirecting the user to untrusted sites [27].”
BackgroundOpportunities and threats: A security assessment of state e-government websites
Zhao, J. J., Zhao, S. Y., & Zhao, S. Y. (2009) · Government Information Quarterly · doi:10.1016/j.giq.2009.07.004 · Cited by 147
The Secure HyperText Transfer Protocol
Rescorla, E., & Schiffman, A. (1999) · doi:10.17487/rfc2660 · Cited by 138 · cited 1×
“HTTPS protects confidential online transactions like electronic banking and electronic shopping [9].”
BackgroundPrivacy Pass: Bypassing Internet Challenges Anonymously
Davidson, A., Goldberg, I., Sullivan, N., et al. (2018) · Proceedings on Privacy Enhancing Technologies · doi:10.1515/popets-2018-0026 · Cited by 127 · cited 1×
“Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes [30].”
BackgroundAn overview of vulnerability assessment and penetration testing techniques
Shah, S., & Mehtre, B. M. (2014) · Journal of Computer Virology and Hacking Techniques · doi:10.1007/s11416-014-0231-x · Cited by 116
Massacci, F., Prest, M., & Zannone, N. (2005) · Computer Standards & Interfaces · doi:10.1016/j.csi.2005.01.003 · Cited by 88 · cited 1×
“Reference [18] views penetration testing as an effort to gain entry into a system to prove that its protection has weaknesses.”
BackgroundVulnerability Assessment & Penetration Testing as a Cyber Defence Technology
Goel, J. N., & Mehtre, B. M. (2015) · Procedia Computer Science · doi:10.1016/j.procs.2015.07.458 · Cited by 64 · cited 2×
“Hence the goal of penetration testing is not to hack or break a company’s IT system [22], but to provide solutions to finding vulnerabilities and expert security advice to help strengthen the security of the system [16].”
BackgroundAssessing Users’ Privacy and Security Concerns of Smart Home Technologies
Zimmermann, V., Gerber, P., Marky, K., Böck, L., & Kirchbuchner, F. (2019) · i-com · doi:10.1515/icom-2019-0015 · Cited by 56 · cited 1×
“Some e-commerce websites also passively record data on users’ browsing habits and match that data with personal and demographic information to create a profile of user preferences [3].”
BackgroundBhiogade, M. S. (2002) · Informing Science and IT Education Conference · doi:10.28945/2441 · Cited by 48
Using penetration testing to enhance your company's security
Yeo, J. (2013) · Computer Fraud & Security · doi:10.1016/s1361-3723(13)70039-3 · Cited by 34 · cited 1×
“According to [20], no system is 100% secure.”
BackgroundScalable internet servers: issues and challenges
Kant, K., & Mohapatra, P. (2000) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/362883.362891 · Cited by 32
Computational Techniques for Real-Time Credit Card Fraud Detection
Mittal, S., & Tyagi, S. (2019) · Springer eBooks · doi:10.1007/978-3-030-22277-2_26 · Cited by 27 · cited 1×
“Attacks in e-commerce are said to have risen by 15% from 2006 to 2007 [5] Customer privacy is an integral part of electronic commerce strategies and investments in privacy protection and has shown to increase customers’ spend, trustworthiness, and loyalty.”
BackgroundPerspectives on Penetration Testing — Black Box vs. White Box
Midian, P. (2002) · Network Security · doi:10.1016/s1353-4858(02)11009-9 · Cited by 10
A Study on Encryption Techniques to Protect the Patient Privacy in Health Care Systems
Khandare, L., Sreekantha, D. K., & Sairam, K. (2019) · Innovations in Power and Advanced Computing Technologies (i-PACT) · doi:10.1109/i-pact44901.2019.8960235 · Cited by 9 · cited 1×
“These tools include encryption authentication mechanisms, intrusion detection, security management and firewalls [7].”
MethodThe Biometrics System Based on Iris Image Processing: A Review
Khoirunnisaa, A. Z., Hakim, L., & Wibawa, A. D. (2019) · doi:10.1109/ic2ie47452.2019.8940832 · Cited by 8 · cited 1×
“Cybercrime has increased by approximately 13% in 2017 [1].”
BackgroundCross Site Scripting: An Overview
Patil, V. S., Bamnote, G. R., & Nair, S. S. (2011) · Cited by 8
Blowfish Algorithm Implementation on Electronic Data in a Communication Network
Cordova, R. S., Maata, R. L., & Halibas, A. S. (2019) · doi:10.1109/icecta48151.2019.8959702 · Cited by 8 · cited 1×
“To reduce the vulnerability of computers and customers in a network, organizations could choose from a variety of products or a combination of them to secure their networks [6].”
BackgroundManaging network security — Part 9: Penetration testing?
Cohen, F. (1997) · Network Security · doi:10.1016/s1353-4858(97)83240-0 · Cited by 6 · cited 2×
“Reference [17] believe that penetration testing aims to determine possible entry points into a system using common techniques and tools used by hackers.”
BackgroundPrivacy and Security Concerns in Electronic Commerce Websites in Ghana: A Survey Study
Baako, I., Umar, S., & Gidisu, P. (2019) · International Journal of Computer Network and Information Security · doi:10.5815/ijcnis.2019.10.03 · Cited by 6
Self-citationUsing w3af to achieve automated penetration testing by live DVD/live USB
Ke, J.-K., Yang, C.-H., & Ahn, T.-N. (2009) · Proceedings of the 2009 International Conference on Hybrid Information Technology · doi:10.1145/1644993.1645078 · Cited by 5 · cited 2×
“The TLS Handshake Protocol ensures that the server and client authenticate each other to negotiate an encryption algorithm and cryptographic keys for data to be exchanged [15].”
BackgroundEngineering Secure Web Services
Rodrigues, D., Estrella, J. C., Monaco, F. J., et al. (2011) · Advances in web technologies and engineering book series · doi:10.4018/978-1-60960-794-4.ch016 · Cited by 5
Efficient and Secure k-Nearest Neighbor Search Over Encrypted Data in Public Cloud
Song, F., Qin, Z. K., Liu, Q., et al. (2019) · doi:10.1109/icc.2019.8761620 · Cited by 4 · cited 2×
“Complete coverage requires a combination of manual code review and penetration testing, in addition to automated approaches [29].”
MethodSayibu, U., Twum, F., & Baako, I. (2019) · International Journal of Computer Network and Information Security · doi:10.5815/ijcnis.2019.11.06 · Cited by 3
Self-citationSecure Socket Layer Visualization Tool with Packet Capturing Function
Shinozaki, J., & Arai, M. (2014) · International Journal of Future Computer and Communication · doi:10.7763/ijfcc.2014.v3.293 · Cited by 3
Phishing e mail detection in e Banking using data mining techniques
Hanees, A. L. (2019) · Cited by 1
Tracking the cookies : A quantitative study on user perceptions about online tracking
Arlfors, C. G., & Nilsson, S. (2019) · Cited by 1
Identity and consent in the internet of persons, things and services
kome, L., & Iván, M. (2019) · Cited by 1
Identité et consentement dans l’internet des personnes, des objets et des services
Kome, I. M. L. (2019) · HAL (Le Centre pour la Communication Scientifique Directe) · Cited by 1
Identity and consent in the internet of persons, things and services
Kome, I. M. L. (2019) · theses.fr (ABES) · doi:10.70675/cefae390z461az47f0zbf87z63f4f0dfe34c · Cited by 1
Engineering Secure Web Services
Rodrigues, D., Estrella, J. C., Monaco, F. J., et al. (n.d.) · Crisis Management · doi:10.4018/978-1-4666-4707-7.ch008
Flagged first, then by citations
4 of the 37 references couldn’t be matched to a known paper.
Research works printed but not linked: 2
- [35]35. Issah Baako, Sayibu Umar, Prosper Gidisu, "Privacy and Security Concerns in Electronic Commerce Websites in Ghana: A Survey Study", International Journal of Computer Network and Information Security (IJCNIS), Vol.11, No.10, pp.19-25, 2019. DOI: 10.5815/ijcnis.2019.10.03. · DOI
- [36]36. Umar Sayibu, Frimpong Twum, Issah Baako, "Delivering a Secured Cloud Computing Architecture and Traditional IT Outsourcing Environment via Penetration Tools in Ghana", International Journal of Computer Network and Information Security(IJCNIS), Vol.11, No.11, pp.46-59, 2019. DOI: 10.5815/ijcnis.2019.11.06 · DOI
Cited by
Sorted by citations
Melović, B., Šehović, D., Karadžić, V., Dabić, M., & Ćirović, D. (2021) · Technology in Society · doi:10.1016/j.techsoc.2021.101561 · Cited by 140
Machine Learning for Healthcare-IoT Security: A Review and Risk Mitigation
Khatun, M. A., Memon, S. F., Eising, C., & Dhirani, L. L. (2023) · IEEE Access · doi:10.1109/access.2023.3346320 · Cited by 128
“Nevertheless, browsers are not immune from vulnerabilities [116], [117].”
BackgroundYang, J., Cao, C., Ye, C., & Shi, Y. (2022) · Sustainability · doi:10.3390/su14127110 · Cited by 70
“The presence of security vulnerabilities on an e-commerce website can create an atmosphere of insecurity, which reduces customer patronage of the site [60].”
BackgroundPopa, I., Nicolescu, L., Ștefan, S. C., & Popa, Ș. C. (2022) · Electronics · doi:10.3390/electronics11152442 · Cited by 25
Web Performance Analysis: An Empirical Analysis of E-Commerce Sites in Bangladesh
Hossain, M. T., Hassan, R., Amjad, M., et al. (2021) · International Journal of Information Engineering and Electronic Business · doi:10.5815/ijieeb.2021.04.04 · Cited by 20
“Where, vulnerability issues of e-commerce sites have been experimented by [18] applying both technical and non-technical strategies.”
BackgroundKovtun, V. V., Izonin, I., & Greguš, M. (2022) · Scientific Reports · doi:10.1038/s41598-022-11193-w · Cited by 19
E-commerce Drivers During the Pandemic and Global Digitalization: A Review Study
Федушко, С., Trevoho, O., Hoshovska, O., et al. (2023) · Studies in systems, decision and control · doi:10.1007/978-3-031-25695-0_11 · Cited by 10
The Role of Secure Online Payments in Enabling the Development of E-Tailing
Houcheimi, A., & Mezei, J. (2024) · Journal of Organizational Computing and Electronic Commerce · doi:10.1080/10919392.2024.2371236 · Cited by 6
“In their analysis of e-commerce websites, Baako and Umar (2020) found that applying encryption technology for all sensitive data for online transactions is a requirement for securing e-commerce websites as encrypted websites are safe for online shopping.”
PHP: Vulnerabilities and Solutions
Yenduri, R., & Al-khassaweneh, M. (2022) · 2022 2nd International Mobile, Intelligent, and Ubiquitous Computing Conference (MIUCC) · doi:10.1109/miucc55081.2022.9781790 · Cited by 6
Integration of Programs for Online Shopping for Users of Android Devices
Hatem, F., Mirzah, N., Hamdoun, S. H., et al. (2024) · doi:10.23919/fruct61870.2024.10516403 · Cited by 5
Tiurmenko, I., Bozhuk, L., Struk, I., et al. (2022) · Studies in systems, decision and control · doi:10.1007/978-3-030-97008-6_20 · Cited by 4
Complex Model for Personal Data Management of Online Project Users
Федушко, С., Mastykash, O., Syerov, Y., & Kalambet, Y. (2021) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-030-80472-5_22 · Cited by 1
Analysis of User Personal Data Security at E-Commerce Based on User Viewpoints
Az-zahra, A., Cahyani, N. D. W., & Suryani, V. (2024) · doi:10.1109/icoict61617.2024.10698657
“[2]. b) What is your experience with implementing data security practices when interacting with e-commerce?”
BackgroundEconomic Security of Ukraine’s Railway Transport in the Context of National Security
Chekhovska, M., Manzhul, I., & Lisovska, O. (2021) · Advances in economics, business and management research/Advances in Economics, Business and Management Research · doi:10.2991/aebmr.k.210826.015
Metadata
- Authors
- Bagabaga College of Education, T., Baako, I., & Umar, S.
- Affiliations
- Bagabaga College of Education (GH)
- Venue
- International Journal of Information Engineering and Electronic Business
- Publisher
- MECS Publisher
- Published
- 2020-10-08
- Volume
- 12
- Issue
- 5
- Pages
- 24-32
- ISSN
- 2074-9023 (ISSN-L)
- 2074-9031
- OpenAlex
- W3092963541
- Cited by
- 15
- References
- 37
- Citations by year
- 2024: 3 · 2023: 2 · 2022: 5 · 2021: 4 · 2020: 1
- FWCI
- 2.82
- Type
- journal article
- Language
- en
- Open access
- diamond
- doi.org
- Locations
- International Journal of Information Engineering and Electronic Business (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
- Keywords
- web application vulnerabilities, vulnerability assessment, cross-site request forgery, consumer data protection, online fraud
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
A language model drew the claims from the paper on 2026-10-11, under version 3 of the claim definition (model deepseek-v4.1-flash, prompt extract-v3).
A second model labelled each claim on 2026-10-11 (model jev-1.13-20260917, definition revision gold-guideline-v0.2).
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
