Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets

Sebastian Lekies, Krzysztof Kotowicz, Samuel Groß, Eduardo A. Vela Nava, Martin Johns. Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets. In Bhavani M. Thuraisingham, David Evans, Tal Malkin, Dongyan Xu, editors, Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS 2017, Dallas, TX, USA, October 30 - November 03, 2017. pages 1709-1723, ACM, 2017. [doi]

@inproceedings{LekiesKGNJ17,
  title = {Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets},
  author = {Sebastian Lekies and Krzysztof Kotowicz and Samuel Groß and Eduardo A. Vela Nava and Martin Johns},
  year = {2017},
  doi = {10.1145/3133956.3134091},
  url = {http://doi.acm.org/10.1145/3133956.3134091},
  researchr = {https://researchr.org/publication/LekiesKGNJ17},
  cites = {0},
  citedby = {0},
  pages = {1709-1723},
  booktitle = {Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS 2017, Dallas, TX, USA, October 30 - November 03, 2017},
  editor = {Bhavani M. Thuraisingham and David Evans and Tal Malkin and Dongyan Xu},
  publisher = {ACM},
  isbn = {978-1-4503-4946-8},
}