{"id":"https://openalex.org/W4226415249","doi":"https://doi.org/10.1109/access.2022.3166175","title":"HTB: A Very Effective Method to Protect Web Servers Against BREACH Attack to HTTPS","display_name":"HTB: A Very Effective Method to Protect Web Servers Against BREACH Attack to HTTPS","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4226415249","doi":"https://doi.org/10.1109/access.2022.3166175"},"language":"en","primary_location":{"id":"doi:10.1109/access.2022.3166175","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3166175","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09754554.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09754554.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044775727","display_name":"Rafael Palacios","orcid":"https://orcid.org/0000-0002-8963-5074"},"institutions":[{"id":"https://openalex.org/I96580804","display_name":"Universidad Pontificia Comillas","ror":"https://ror.org/017mdc710","country_code":"ES","type":"education","lineage":["https://openalex.org/I96580804"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Rafael Palacios","raw_affiliation_strings":["ICAI School of Engineering, Institute for Research in Technology, Pontifical Comillas University, Madrid, Spain","Institute for Research in Technology, ICAI School of Engineering, Pontifical Comillas University, Madrid, Spain"],"raw_orcid":"https://orcid.org/0000-0002-8963-5074","affiliations":[{"raw_affiliation_string":"ICAI School of Engineering, Institute for Research in Technology, Pontifical Comillas University, Madrid, Spain","institution_ids":["https://openalex.org/I96580804"]},{"raw_affiliation_string":"Institute for Research in Technology, ICAI School of Engineering, Pontifical Comillas University, Madrid, Spain","institution_ids":["https://openalex.org/I96580804"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056485217","display_name":"Andrea Farina Fernandez-Portillo","orcid":null},"institutions":[{"id":"https://openalex.org/I96580804","display_name":"Universidad Pontificia Comillas","ror":"https://ror.org/017mdc710","country_code":"ES","type":"education","lineage":["https://openalex.org/I96580804"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Andrea Farina Fernandez-Portillo","raw_affiliation_strings":["ICAI School of Engineering, Institute for Research in Technology, Pontifical Comillas University, Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICAI School of Engineering, Institute for Research in Technology, Pontifical Comillas University, Madrid, Spain","institution_ids":["https://openalex.org/I96580804"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062263776","display_name":"Eugenio F. S\u00e1nchez\u2010\u00dabeda","orcid":"https://orcid.org/0000-0001-6470-8399"},"institutions":[{"id":"https://openalex.org/I96580804","display_name":"Universidad Pontificia Comillas","ror":"https://ror.org/017mdc710","country_code":"ES","type":"education","lineage":["https://openalex.org/I96580804"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Eugenio F. Sanchez-Ubeda","raw_affiliation_strings":["ICAI School of Engineering, Institute for Research in Technology, Pontifical Comillas University, Madrid, Spain","Institute for Research in Technology, ICAI School of Engineering, Pontifical Comillas University, Madrid, Spain"],"raw_orcid":"https://orcid.org/0000-0001-6470-8399","affiliations":[{"raw_affiliation_string":"ICAI School of Engineering, Institute for Research in Technology, Pontifical Comillas University, Madrid, Spain","institution_ids":["https://openalex.org/I96580804"]},{"raw_affiliation_string":"Institute for Research in Technology, ICAI School of Engineering, Pontifical Comillas University, Madrid, Spain","institution_ids":["https://openalex.org/I96580804"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065151319","display_name":"Pablo Garcia-De-Zuniga","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Pablo Garcia-De-Zuniga","raw_affiliation_strings":["Department of Cybersecurity, Siemens, Munich, Germany","Department of Cybersecurity. Siemens, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cybersecurity, Siemens, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]},{"raw_affiliation_string":"Department of Cybersecurity. Siemens, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.9898,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.73234103,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"10","issue":null,"first_page":"40381","last_page":"40390"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8381837010383606},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.6564432382583618},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6070210933685303},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5926681756973267},{"id":"https://openalex.org/keywords/randomness","display_name":"Randomness","score":0.5557130575180054},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.5321112275123596},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5226697325706482},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4841757118701935},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4692620635032654},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.46402910351753235},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4270707070827484},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.27214962244033813}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8381837010383606},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.6564432382583618},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6070210933685303},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5926681756973267},{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.5557130575180054},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.5321112275123596},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5226697325706482},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4841757118701935},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4692620635032654},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.46402910351753235},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4270707070827484},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.27214962244033813},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2022.3166175","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3166175","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09754554.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:9eb849a48cd94bafab6daab75db2ced5","is_oa":true,"landing_page_url":"https://doaj.org/article/9eb849a48cd94bafab6daab75db2ced5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 40381-40390 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2022.3166175","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3166175","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09754554.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.8299999833106995,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4226415249.pdf","grobid_xml":"https://content.openalex.org/works/W4226415249.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W28139543","https://openalex.org/W1571203384","https://openalex.org/W1647616909","https://openalex.org/W1777016212","https://openalex.org/W1983930728","https://openalex.org/W2022126655","https://openalex.org/W2024171325","https://openalex.org/W2107745473","https://openalex.org/W2566802749","https://openalex.org/W2575293099","https://openalex.org/W2603020828","https://openalex.org/W2774690544","https://openalex.org/W2790905654","https://openalex.org/W2911558120","https://openalex.org/W3000462278","https://openalex.org/W6746890234"],"related_works":["https://openalex.org/W3034924094","https://openalex.org/W1488708774","https://openalex.org/W3094954546","https://openalex.org/W2981906196","https://openalex.org/W4391100477","https://openalex.org/W4327779705","https://openalex.org/W1513698804","https://openalex.org/W4310560702","https://openalex.org/W2029712093","https://openalex.org/W2811273613"],"abstract_inverted_index":{"BREACH":[0,62,119],"is":[1,56,100,129,190,214],"a":[2,21,32,73,80,97,154,229],"side-channel":[3],"attack":[4,63,197],"to":[5,11,60,91,94,125,130,162,168,174,192,205,218],"HTTPS":[6,49],"that":[7],"allows":[8],"an":[9,165],"attacker":[10,19,78,166],"obtain":[12,175],"victims\u2019":[13],"credentials":[14],"under":[15],"certain":[16],"conditions.":[17],"An":[18],"with":[20],"privileged":[22],"position":[23],"on":[24],"the":[25,39,42,46,53,57,67,86,89,103,107,114,117,136,140,144,158,184,196,208,225],"network":[26],"can":[27],"guess":[28,98],"character":[29,31,99],"by":[30,37,45,64],"secret":[33,104],"session":[34],"key":[35],"just":[36],"analyzing":[38],"size":[40,68,87,115,138,159],"of":[41,69,82,88,102,116,139,157,186],"responses":[43,71,90],"returned":[44],"server":[47,70],"over":[48],"and":[50,134,148,178,194,227],"encrypted.":[51],"Heal":[52],"Breach":[54],"(HTB)":[55],"proposed":[58],"technique":[59],"mitigate":[61],"randomly":[65],"changing":[66],"through":[72],"modified":[74,108],"gzip":[75,109],"library.":[76],"The":[77,122],"needs":[79,167],"precision":[81],"one":[83],"byte":[84],"in":[85,113,211,224,232],"be":[92],"able":[93],"determine":[95],"if":[96,183],"part":[101],"token.":[105],"Since":[106],"library":[110],"introduces":[111],"randomness":[112],"response,":[118,141],"becomes":[120],"ineffective.":[121],"only":[123],"way":[124],"circumvent":[126],"this":[127,180,212],"protection":[128],"make":[131],"several":[132],"requests":[133,187],"compute":[135],"average":[137],"which":[142],"minimizes":[143],"random":[145,155],"effect.":[146],"Mathematical":[147],"experimental":[149],"results":[150],"show":[151],"that,":[152],"for":[153,220],"variation":[156],"from":[160],"1":[161],"10":[163],"bytes,":[164],"analyze":[169],"500":[170],"times":[171],"more":[172],"packages":[173],"enough":[176],"accuracy":[177],"surpass":[179],"mitigation.":[181],"However,":[182],"number":[185],"increases":[188],"it":[189],"easier":[191],"isolate":[193],"block":[195],"using":[198],"standard":[199],"Intrusion":[200],"Detection":[201],"Systems":[202],"(IDS).":[203],"Compared":[204],"other":[206],"mitigations,":[207],"approach":[209],"presented":[210],"paper":[213],"very":[215],"effective,":[216],"easy":[217],"implement":[219],"all":[221],"websites":[222],"hosted":[223],"server,":[226],"produces":[228],"negligible":[230],"increase":[231],"normal":[233],"traffic.":[234]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}