New Insights into Clickjacking

Clickjacking

The “Twitter bomb”

Approach

Testing

Detection

Experiments [1/2]

Experiments [2/2]

Discussion – True Positives

Discussion – False Positives

Discussion of Borderline Cases

What have we learned?

Looking at the future [1/2]

Looking at the future [2/2]

Some mitigation techniques

More references

Summary