Communications of the ACM
Latest Research
From Communications of the ACM
The Emergence of Cross Channel Scripting
Lightweight, embedded Web servers are soon about to outnumber regular Internet Web servers. We reveal a series of attacks that target...
From Communications of the ACM
Technical Persepctive: Attacks Target Web Server Logic and Prey on XCS Weaknesses
A system is secure only if the entire system is secure. While this may sound obvious, achieving total security throughout a system is rarely trivial when you consider...
From Communications of the ACM
Spamalytics: An Empirical Analysis of Spam Marketing Conversion
We all receive spam advertisements, but few of us have encountered a person who admits to following through on an offer and making a purchase. And yet, the relentlessness...
From Communications of the ACM
Technical Perspective: They Do Click, Don't They?
You never click on advertisements received in spam or in phishing messages, do you? Nobody does. So, if that is...
From Communications of the ACM
Does Distributed Development Affect Software Quality?: An Empirical Case Study of Windows Vista
Existing literature on distributed development in software engineering and other fields discusses various challenges,...
From Communications of the ACM
Technical Perspective: Maintaining Quality in the Face of Distributed Development
It was a problem that should not have taken three weeks to solve. The documentation claimed that if a function was called...
From Communications of the ACM
Securing Frame Communication in Browsers
Many Web sites embed third-party content in frames, relying on the browser's security policy to protect against malicious content. However, frames provide insufficient...
From Communications of the ACM
Technical Perspective: Reframing Security For the Web
The web has brought exciting new functionality while simultaneously requiring new mechanisms to make it secure. We've...
From Communications of the ACM
Lest We Remember: Cold-Boot Attacks on Encryption Keys
DRAM retains its contents for several seconds after power is lost. Although DRAM becomes less reliable when it is not refreshed, it is not immediately erased, and...
From Communications of the ACM
Technical Perspective: A Chilly Sense of Security
Many systems rely on keeping a master key secret. But technological progress can undermine old assumptions.12