{"id":"W2106620684","doi":"10.1109/cse.2009.372","title":"Threat Modeling for CSRF Attacks","year":2009,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":54,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University of Edmonton","funders":"","keywords":"Computer science; Threat model; Vulnerability (computing); Web application security; Computer security; Vulnerability assessment; Vulnerability management; World Wide Web; Web service; Web development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001835611,0.001023841,0.0006391634,0.001483946,0.0007716354,0.001963305,0.001321485,0.001980448,0.004053664],"category_scores_gemma":[0.005263902,0.0004140745,0.001174281,0.0007015617,0.001042847,0.00302396,0.001329294,0.002077402,0.0009530408],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001652836,"about_ca_system_score_gemma":0.001516617,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.008042339,"about_ca_topic_score_gemma":0.005298791,"domain_scores_codex":[0.9984145,0.0006314658,0.00008239138,0.000171291,0.0004632434,0.0002371267],"domain_scores_gemma":[0.9966716,0.002034362,0.0004486459,0.0002549671,0.0004434924,0.0001469651],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003967805,0.00005456112,0.0008079396,0.00004701552,0.00002700554,0.0002124677,0.0001756447,0.7990065,0.000791568,0.1886012,0.002239584,0.00799684],"study_design_scores_gemma":[0.000005635524,0.00001300368,0.0001042251,0.000007366179,0.000006496868,0.00005315214,0.00002691444,0.9592511,0.0001071429,0.03883315,0.001583003,0.00000873016],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.05934068,0.0006007694,0.8928849,0.002381063,0.000140205,0.0003050864,0.0008237113,0.0008079126,0.04271562],"genre_scores_gemma":[0.9055319,0.0009245157,0.07676537,0.0003656773,0.0001478365,0.0004182714,0.0006073557,0.0001458199,0.0150932],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.008042339,"threshold_uncertainty_score":0.01599103,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03541507962795403,"score_gpt":0.3001777122192298,"score_spread":0.2647626325912758,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}