Client-Side Attacks and Defense