| DOM based cross site scripting or XSS of the third kind A Klein Web Application Security Consortium, Articles 4, 365-372, 2005 | 241 | 2005 |
| System and method for detecting a proxy between a client and a server A Klein US Patent 8,122,082, 2012 | 181 | 2012 |
| Scrambling HTML to prevent CSRF attacks and transactional crimeware attacks M Boodaei, A Klein US Patent App. 11/714,933, 2008 | 136 | 2008 |
| System and method for detecting and mitigating DNS spoofing trojans A Klein, Z Golan US Patent 8,266,295, 2012 | 130 | 2012 |
| Detection of phishing attempts A Klein, M Boodaei US Patent 9,111,090, 2015 | 92 | 2015 |
| Web based remote malware detection A Klein, M Boodaei US Patent 9,270,691, 2016 | 90 | 2016 |
| Domain validation++ for mitm-resilient pki M Brandt, T Dai, A Klein, H Shulman, M Waidner Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications …, 2018 | 77 | 2018 |
| Cross site scripting explained A Klein Sanctum White Paper, 1-7, 2002 | 72* | 2002 |
| System and method for conducting secure transactions A Klein, R Heled US Patent 7,908,223, 2011 | 70 | 2011 |
| Client based local malware detection method A Klein US Patent 9,424,424, 2016 | 69 | 2016 |
| Internet-wide study of DNS cache injections A Klein, H Shulman, M Waidner IEEE INFOCOM 2017-IEEE Conference on Computer Communications, 1-9, 2017 | 67 | 2017 |
| Method for identifying malicious executables A Klein, M Boodaei US Patent App. 13/589,660, 2014 | 65 | 2014 |
| Method for detecting fraudulent money transfer A Klein, M Boodaei US Patent 8,725,636, 2014 | 61 | 2014 |
| Divide and conquer: HTTP response splitting, Web cache poisoning attacks, and related topics A Klein | 61* | 2004 |
| BIND 9 DNS cache poisoning A Klein Report, Trusteer, Ltd 3, 2007 | 60 | 2007 |
| Method for rendering password theft ineffective M Boodaei, A Klein US Patent App. 11/769,361, 2009 | 46 | 2009 |
| DNS Cache-Based User Tracking. A Klein, B Pinkas NDSS, 2019 | 44 | 2019 |
| System and method for detecting fraudulent transactions A Klein, R Heled, L Golan US Patent 8,311,907, 2012 | 43 | 2012 |
| A guide to building secure web applications and web services A Wiesmann, A van der Stock, M Curphey, R Stirbei, A Kang, A Russell, ... The Open Web Application Security Project, 2005 | 40 | 2005 |
| OpenBSD DNS cache poisoning and multiple O/S predictable IP ID vulnerability A Klein Packet Storm, 2007 | 36 | 2007 |
