Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page
Demo Data from EDBT 2026 / reviewers in the wild / expert

Gautam Nagesh Peri

dblp:153/5736 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
0since 2021 · last 2014
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Systems and software security · 44% Web and mobile security · 44% Blockchain and cryptocurrency security · 13%

Topics — the 3 heaviest of 3, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security › exploitation › injection attacks
code injection attack		 0.212014
Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation · CCS 2014
Web and mobile security › web security
cross-site scripting		 0.212014
Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation · CCS 2014
Blockchain and cryptocurrency security › smart contract security
vulnerability detection		 0.112014
Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation · CCS 2014

Methods — techniques the papers use, named apart from their topics

vulnerability detection · 0.2patch · 0.2
YearPublicationVenuePosition
2014 Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation
abstract
Due to the portability advantage, HTML5-based mobile apps are getting more and more popular.Unfortunately, the web technology used by HTML5-based mobile apps has a dangerous feature, which allows data and code to be mixed together, making code injection attacks possible. In this paper, we have conducted a systematic study on this risk in HTML5-based mobile apps. We found a new form of code injection attack, which inherits the fundamental cause of Cross-Site Scripting attack~(XSS), but it uses many more channels to inject code than XSS. These channels, unique to mobile devices, include Contact, SMS, Barcode, MP3, etc. To assess the prevalence of the code injection vulnerability in HTML5-based mobile apps, we have developed a vulnerability detection tool to analyze 15,510 PhoneGap apps collected from Google Play. 478 apps are flagged as vulnerable, with only 2.30\% false-positive rate. We have also implemented a prototype called NoInjection as a Patch to PhoneGap in Android to defend against the attack.
Xunchao Hu, Kailiang Ying, Wenliang Du 0001, Heng Yin 0001, Gautam Nagesh Peri
 CCS6