Publications

• Large-scale Security Analysis of the Web: Challenges and Findings, Tom van Goethem, Ping Chen, Nick Nikiforakis, Lieven Desmet, Wouter Joosen, TRUST 2014, Berlin Heidelberg, Germany, http://link.springer.com/chapter/10.1007%2F978-3-319-08593-7_8
• Stateful declassification policies for event-driven programs, CSF 2014Mathy Vanhoef, Willem De Groef, Dominique Devriese, Frank Piessens, and Tamara Rezk, CSF 2014, https://lirias.kuleuven.be/bitstream/123456789/452207/1/sme_declassification.pdf
• STRINT Workshop (workshop report), S. Farrell, R. Wenning, B. Bos, M. Blanchet, H. Tschofenig, W3C & IETF, https://www.w3.org/2014/strint/draft-iab-strint-report.html
• A security architecture for server-side JavaScript: Extended abstract, Willem De Groef, Fabio Massacci, and Frank Piessens, JSTOOLS 2014, 26 July 2014, https://lirias.kuleuven.be/bitstream/123456789/458467/1/jstools.pdf
• Crying wolf? On the price discrimination of online airline tickets, Thomas Vissers, Nick Nikiforakis, Nataliia Bielova, and Wouter Joosen, HotPETs 2014, 18 July 2014, https://lirias.kuleuven.be/handle/123456789/454872
• Stranger danger: Exploring the ecosystem of ad-based URL shortening services, Nick Nikiforakis, WWW 2014, 7-11 April 2014, IW3C2, Seoul, Korea, https://lirias.kuleuven.be/handle/123456789/440951
• Secure multi-execution of web scripts: Theory and practice, Willem De Groef, Journal of Computer Security, IOS Press, https://lirias.kuleuven.be/bitstream/123456789/442492/2/flowfox.pdf
• A Dangerous Mix: Large-scale analysis of mixed-content websites, Ping Chen, ISC 2013, http://www.securitee.org/files/mixedinc_isc2013.pdf
• Web Application Security - Web @ 25 – Preface, Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld, Journal of Computer Security, IOS Press
• Information flow control for web scripts, Willem De Groef, Dominique Devriese, Mathy Vanhoef, Frank Piessens, FOSAD 2014, Berlin Heidelberg, Germany, http://link.springer.com/chapter/10.1007%2F978-3-319-10082-1_5
• Monkey-in-the-browser: Malware and vulnerabilities in augmented browsing script markets, Steven Van Acker, Nick Nikiforakis, Lieven Desmet, Frank Piessens, Wouter Joosen, AsiaCCS 2014, 4-6 June, 2014, New York, USA, http://www.cs.kuleuven.be/publicaties/rapporten/cw/CW657.pdf
• On the workings and current practices of web-based device fingerprinting,Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, and Giovanni Vigna, IEEE Security & Privacy, http://www.computer.org/csdl/mags/sp/2014/03/msp2014030028-abs.html

Standards and related documents

• Cross-Origin Resource Sharing, Anne van Kesteren, W3C Recommendation, http://www.w3.org/TR/2014/REC-cors-20140116/
• Subresource Integrity, Frederik Braun, Devdatta Akhawe, Joel Weinberger, Mike West, http://www.w3.org/TR/2014/WD-SRI-20140318/
• User Interface Security Directives for Content Security Policy, Giorgio Maone, David Lin-Shung Huang, Tobias Gondrom, Brad Hil, http://www.w3.org/TR/2014/WD-UISecurity-20140318/
• Web Cryptography API, Ryan Sleevi, Mark Watson, http://www.w3.org/TR/2014/WD-WebCryptoAPI-20140325/
• Content Security Policy Level 2, Mike West, Adam Barth, Dan Veditz, http://www.w3.org/TR/2014/WD-CSP2-20140703/
• Referrer Policy, Jochen Eisinger, Mike West, http://www.w3.org/TR/2014/WD-referrer-policy-20140807/
• Mixed Content, Mike West, http://www.w3.org/TR/2014/WD-mixed-content-20140916/