65 citations · 489 across the 70 of their papers we have counts for
10 papers · 1 filter
A Demand-Side Viewpoint to Software Vulnerabilities in WordPress Plugins
Jukka Ruohonen
WordPress has long been the most popular content management system (CMS). This CMS powers millions and millions of websites. Although WordPress has had a particularly bad track rec…
An Empirical Analysis of Vulnerabilities in Python Packages for Web Applications
Jukka Ruohonen
This paper examines software vulnerabilities in common Python packages used particularly for web development. The empirical dataset is based on the PyPI package repository and the…
On the Integrity of Cross-Origin JavaScripts
Jukka Ruohonen, Joonas Salovaara, Ville Leppänen
The same-origin policy is a fundamental part of the Web. Despite the restrictions imposed by the policy, embedding of third-party JavaScript code is allowed and commonly used. Noth…
Toward Validation of Textual Information Retrieval Techniques for Software Weaknesses
Jukka Ruohonen, Ville Leppänen
This paper presents a preliminary validation of common textual information retrieval techniques for mapping unstructured software vulnerability information to distinct software wea…
Invisible Pixels Are Dead, Long Live Invisible Pixels!
Jukka Ruohonen, Ville Leppänen
Privacy has deteriorated in the world wide web ever since the 1990s. The tracking of browsing habits by different third-parties has been at the center of this deterioration. Web co…
A Bug Bounty Perspective on the Disclosure of Web Vulnerabilities
Jukka Ruohonen, Luca Allodi
Bug bounties have become increasingly popular in recent years. This paper discusses bug bounties by framing these theoretically against so-called platform economy. Empirically the…
Investigating the Agility Bias in DNS Graph Mining
Jukka Ruohonen, Ville Leppänen
The concept of agile domain name system (DNS) refers to dynamic and rapidly changing mappings between domain names and their Internet protocol (IP) addresses. This empirical paper…
An Empirical Survey on the Early Adoption of DNS Certification Authority Authorization
Jukka Ruohonen
A new certification authority authorization (CAA) resource record for the domain name system (DNS) was standardized in 2013. Motivated by the later 2017 decision to enforce mandato…
Whose Hands Are in the Finnish Cookie Jar?
Jukka Ruohonen, Ville Leppänen
Web cookies are ubiquitously used to track and profile the behavior of users. Although there is a solid empirical foundation for understanding the use of cookies in the global worl…
A Look at the Time Delays in CVSS Vulnerability Scoring
Jukka Ruohonen
This empirical paper examines the time delays that occur between the publication of Common Vulnerabilities and Exposures (CVEs) in the National Vulnerability Database (NVD) and the…