Live briefing
Everything about Clickjacking
Malicious technique of tricking a Web user
Clickjacking is a malicious technique of tricking a user into clicking on something different from what the user perceives, thus potentially revealing confidential information or allowing others to take control of their computer while clicking on seemingly innocuous objects, including web pages. Wikipedia →
🧠Start here: a 6-step reading path
- Read the overview: ClickjackingA 5-minute orientation
- Skim a recent paper: Detecting and predicting countermeasures against clickjackingInfluential work since 2022
- Read the landmark paper: Classification of Clickjacking Attacks and Detection TechniquesCited 6 times
- Go sideways: NoScriptA closely related topic
- Go sideways: Browser securityA closely related topic
đź“– Definitions
Noun A malicious technique whereby part of a webpage is covered by transparent or misleading content that receives the user’s mouse clicks, thus causing them to execute commands they did not intend.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Classification of Clickjacking Attacks and Detection Techniques
Clickjacking: Beware of Clicking
Request and Response Analysis Framework for Mitigating Clickjacking Attacks
Facebook suffers from rash of clickjacking
Clickjacking Vulnerability and Countermeasures
IMPLEMENTASI CLICKJACKING DALAM SERANGAN TAUTAN PALSU UNTUK EKSPLORASI MEDIA SOSIAL
Clickjacking Attack: Hijacking User’s Click
Analysis and Enhancement of Website Security using Anti-CSRF Token, CSP, and Anti-Clickjacking Approaches
🆕 Influential since 2022
đź“š Books worth reading
Open Library didn't respond; try again in a moment.
đź”— Related topics
- NoScript NoScript (or NoScript Security Suite) is a free and open-source extension for Firefox- and Chromium-based web browsers, written and maintained by Giorgio…
- Browser security Browser security is the application of Internet security to web browsers in order to protect networked data and computer systems from breaches of privacy…
- Content Security Policy Content Security Policy (CSP) is a computer security standard introduced to prevent cross-site scripting (XSS), clickjacking and other code injection attacks…
- Netscape Browser Netscape Browser (or Netscape 8) is the eighth major release of the Netscape series of web browsers, now all discontinued. It was published by AOL, but…
- Firefox version history Firefox was created by Dave Hyatt and Blake Ross as an experimental branch of the Mozilla Application Suite, first released as Firefox 1.0 on November…
- Framekiller A framekiller (or framebuster or framebreaker) is a technique used by websites and web applications to prevent their web pages from being displayed within…
- Cross-site request forgery Cross-site request forgery (CSRF, sometimes pronounced sea-surf) is a type of malicious exploit of a website or web application where unauthorized commands…
- Web browser A web browser, often abbreviated as browser, is an application for accessing websites. When a user requests a web page from a particular website, the browser…