TL;DR: In this paper, the authors describe a system that intercepts, from a server computer, one or more original instructions to be sent to a browser of a client computer; send the original instructions, when executed, to generate a set of telemetry data indicating the objects that were referenced by the browser and to send the set of data to the intermediary computer; receive the data and determine whether the browser is legitimate or illegitimate.
Abstract: Computer systems and methods in various embodiments are configured for improving the security and efficiency of server computers interacting through an intermediary computer with client computers that may be executing malicious and/or autonomous headless browsers or “bots”. In an embodiment, a computer system comprises a memory; one or more processors coupled to the memory; a processor logic coupled to the memory and the one or more processors, and configured to: intercept, from a server computer, one or more original instructions to be sent to a browser of a client computer; send the one or more original instructions to the browser and one or more telemetry instructions, wherein the telemetry instructions are configured, when executed, to generate a set of telemetry data indicating one or more objects that were referenced by the browser and to send the set of telemetry data to the intermediary computer; receive the set of telemetry data and determine whether the browser is legitimate or illegitimate based on the set of telemetry data.
TL;DR: In this article, a method comprises intercepting, from a server computer, a first set of instructions that define a user interface; executing, using a headless browser, the first sets of instructions without presenting the user interface.
Abstract: In an embodiment, a method comprises intercepting, from a server computer, a first set of instructions that define a user interface; executing, using a headless browser, the first set of instructions without presenting the user interface; rendering a second set of instructions, which when executed by a client application on a client computer, cause the client computer to present the user interface, wherein the second set of instructions are different than the first set of instructions; sending the second set of instructions to the client computer.
TL;DR: In this article, the authors present a set of hardware-independent graphics commands that can be executed by client browsers to generate a representation of the content page that is the same or substantially the same as the representation that would have been generated by processing the content pages locally.
Abstract: Server systems are disclosed that receive content request and respond with hardware-independent graphics commands instead of, or in addition to, unprocessed content items. Some server systems may act as intermediaries between user devices and content sources. The server systems can obtain content pages from content sources, process the content pages (e.g., using a headless browser), and provide hardware-independent graphics commands (e.g., vector graphics commands, that do not require specialized graphics hardware for execution) to user devices in response to requests for content. The hardware-independent graphics commands can be executed by client browsers to generate a representation of the content page that is the same or substantially the same as the representation that would have been generated by processing the content pages locally. A user device in receipt of such hardware-independent graphics commands can execute them without performing traditional content page processing, thereby improving user-perceived page load times.
TL;DR: This study focuses on one of the major ways in which social scientists collect Internet data for research: using a mobile app to store and retrieve data from the net.
Abstract: As the availability of online data grows rapidly, researchers are confronted with a pressing question: How should social scientists collect Internet data for research? This study focuses on one of ...
TL;DR: An XSS testing tool that collects 6128 payloads and uses a headless browser to detect XSS vulnerability and indicates that the ART method can effectively improve the fuzzing method by more than 27.1% in reducing the number of attempts before accomplishing a successful injection.
Abstract: XSS is one of the common vulnerabilities in web applications. Many black-box testing tools may collect a large number of payloads and traverse them to find a payload that can be successfully injected, but they are not very efficient. And previous research has paid less attention to how to improve the efficiency of black-box testing to detect XSS vulnerability. To improve the efficiency of testing, we develop an XSS testing tool. It collects 6128 payloads and uses a headless browser to detect XSS vulnerability. The tool can discover XSS vulnerability quickly with the ART(Adaptive Random Testing) method. We conduct an experiment using 3 extensively adopted open source vulnerable benchmarks and 2 actual websites to evaluate the ART method. The experimental results indicate that the ART method can effectively improve the fuzzing method by more than 27.1% in reducing the number of attempts before accomplishing a successful injection.