Preliminary research

Poisoned by the Host: Large-Scale Measurement of Host Name Poisoning in Web Applications

Rui Yang, Haoyu Wang, Zhicheng Sun, Zhengyu Liu and Yinzhi Cao · IEEE Symposium on Security and Privacy

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Presents HALO, a host-name-poisoning analysis that combines server request behavior, framework host-access guards and application flow checks. The paper provides a multi-stack testing matrix, source-to-sink examples and results from manual validation of a selected sample of flagged applications.

Record

Researcher

Rui Yang, Haoyu Wang, Zhicheng Sun, Zhengyu Liu and Yinzhi Cao

Published by

IEEE Symposium on Security and Privacy

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• HALO research artifact

Tags

• ssrf
• static-analysis
• measurement-study
• tooling
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of Rui Yang, Haoyu Wang, Zhicheng Sun, Zhengyu Liu and Yinzhi Cao, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 13 September 2026.