• DocumentCode
    1059007
  • Title

    The Confused Deputy and the Domain Hijacker

  • Author

    Ahmad, D. ; Arce, Irwin

  • Author_Institution
    Bombardier Aerosp., Farnborough
  • Volume
    6
  • Issue
    1
  • fYear
    2008
  • Firstpage
    74
  • Lastpage
    77
  • Abstract
    The Gmail vulnerability allowed unauthorized parties to add custom mail filters to target Gmail accounts. The only requirement was that the target users visit a Web site with malicious content while signed into Gmail
  • Keywords
    authorisation; computer crime; unsolicited e-mail; Gmail vulnerability; Web site security; e-mail security; Authorization; Forgery; Graphics; Information services; Internet; Matched filters; Postal services; Privacy; Security; Web sites; Attack Trends; Gmail; Gmail vulnerability; attacks; cross-site request forgery; domain hijacking; vulnerabilities;
  • fLanguage
    English
  • Journal_Title
    Security & Privacy, IEEE
  • Publisher
    ieee
  • ISSN
    1540-7993
  • Type

    jour

  • DOI
    10.1109/MSP.2008.25
  • Filename
    4446703