{"id":"https://openalex.org/W2059072888","doi":"https://doi.org/10.1109/cns.2013.6682755","title":"Safe configuration of TLS connections","display_name":"Safe configuration of TLS connections","publication_year":2013,"publication_date":"2013-10-01","ids":{"openalex":"https://openalex.org/W2059072888","doi":"https://doi.org/10.1109/cns.2013.6682755","mag":"2059072888"},"language":"en","primary_location":{"id":"doi:10.1109/cns.2013.6682755","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2013.6682755","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086656395","display_name":"Michael Atighetchi","orcid":null},"institutions":[{"id":"https://openalex.org/I1306686416","display_name":"RTX (United States)","ror":"https://ror.org/0354t7b78","country_code":"US","type":"company","lineage":["https://openalex.org/I1306686416"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael Atighetchi","raw_affiliation_strings":["Raytheon BBN Technologies, Cambridge, MA","Raytheon BBN Technol., Cambridge, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Raytheon BBN Technologies, Cambridge, MA","institution_ids":["https://openalex.org/I1306686416"]},{"raw_affiliation_string":"Raytheon BBN Technol., Cambridge, MA, USA","institution_ids":["https://openalex.org/I1306686416"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050041188","display_name":"Nathaniel Soule","orcid":null},"institutions":[{"id":"https://openalex.org/I1306686416","display_name":"RTX (United States)","ror":"https://ror.org/0354t7b78","country_code":"US","type":"company","lineage":["https://openalex.org/I1306686416"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nathaniel Soule","raw_affiliation_strings":["Raytheon BBN Technologies, Cambridge, MA","Raytheon BBN Technol., Cambridge, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Raytheon BBN Technologies, Cambridge, MA","institution_ids":["https://openalex.org/I1306686416"]},{"raw_affiliation_string":"Raytheon BBN Technol., Cambridge, MA, USA","institution_ids":["https://openalex.org/I1306686416"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027033797","display_name":"Partha Pal","orcid":"https://orcid.org/0000-0002-5979-4306"},"institutions":[{"id":"https://openalex.org/I1306686416","display_name":"RTX (United States)","ror":"https://ror.org/0354t7b78","country_code":"US","type":"company","lineage":["https://openalex.org/I1306686416"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Partha Pal","raw_affiliation_strings":["Raytheon BBN Technologies, Cambridge, MA","Raytheon BBN Technol., Cambridge, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Raytheon BBN Technologies, Cambridge, MA","institution_ids":["https://openalex.org/I1306686416"]},{"raw_affiliation_string":"Raytheon BBN Technol., Cambridge, MA, USA","institution_ids":["https://openalex.org/I1306686416"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053203670","display_name":"Joseph Loyall","orcid":null},"institutions":[{"id":"https://openalex.org/I1306686416","display_name":"RTX (United States)","ror":"https://ror.org/0354t7b78","country_code":"US","type":"company","lineage":["https://openalex.org/I1306686416"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joseph Loyall","raw_affiliation_strings":["Raytheon BBN Technologies, Cambridge, MA","Raytheon BBN Technol., Cambridge, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Raytheon BBN Technologies, Cambridge, MA","institution_ids":["https://openalex.org/I1306686416"]},{"raw_affiliation_string":"Raytheon BBN Technol., Cambridge, MA, USA","institution_ids":["https://openalex.org/I1306686416"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073539497","display_name":"A. John Sinclair","orcid":"https://orcid.org/0000-0002-5865-0036"},"institutions":[{"id":"https://openalex.org/I1280414376","display_name":"United States Air Force Research Laboratory","ror":"https://ror.org/02e2egq70","country_code":"US","type":"facility","lineage":["https://openalex.org/I1280414376","https://openalex.org/I1330347796","https://openalex.org/I4210102105","https://openalex.org/I4389425425"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Asher Sinclair","raw_affiliation_strings":["Air Force Research Laboratory, Rome, NY, USA","Air Force Research Lab, Rome, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Air Force Research Laboratory, Rome, NY, USA","institution_ids":["https://openalex.org/I1280414376"]},{"raw_affiliation_string":"Air Force Research Lab, Rome, NY, USA","institution_ids":["https://openalex.org/I1280414376"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087178283","display_name":"Robert C. Grant","orcid":"https://orcid.org/0000-0002-9821-0377"},"institutions":[{"id":"https://openalex.org/I1280414376","display_name":"United States Air Force Research Laboratory","ror":"https://ror.org/02e2egq70","country_code":"US","type":"facility","lineage":["https://openalex.org/I1280414376","https://openalex.org/I1330347796","https://openalex.org/I4210102105","https://openalex.org/I4389425425"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert Grant","raw_affiliation_strings":["Air Force Research Laboratory, Rome, NY, USA","Air Force Research Lab, Rome, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Air Force Research Laboratory, Rome, NY, USA","institution_ids":["https://openalex.org/I1280414376"]},{"raw_affiliation_string":"Air Force Research Lab, Rome, NY, USA","institution_ids":["https://openalex.org/I1280414376"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0733,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.76052349,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"415","last_page":"422"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transport-layer-security","display_name":"Transport Layer Security","score":0.8007834553718567},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7639076113700867},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7203924655914307},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5510122776031494},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.48961812257766724},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4445782005786896},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.44058701395988464},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.43573176860809326},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4317846894264221},{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.4244478642940521},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.41070249676704407},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.25238746404647827},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09370878338813782}],"concepts":[{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.8007834553718567},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7639076113700867},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7203924655914307},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5510122776031494},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.48961812257766724},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4445782005786896},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.44058701395988464},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.43573176860809326},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4317846894264221},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.4244478642940521},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.41070249676704407},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.25238746404647827},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09370878338813782},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns.2013.6682755","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2013.6682755","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6200000047683716,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320332467","display_name":"U.S. Air Force","ror":"https://ror.org/006gmme17"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1106092","https://openalex.org/W51862949","https://openalex.org/W1586017240","https://openalex.org/W1978293132","https://openalex.org/W1996736473","https://openalex.org/W2008524185","https://openalex.org/W2024171325","https://openalex.org/W2072210640","https://openalex.org/W2125894704","https://openalex.org/W2138556012","https://openalex.org/W2159840470","https://openalex.org/W2163005041","https://openalex.org/W2164950028","https://openalex.org/W2247093032","https://openalex.org/W3125672686","https://openalex.org/W3141323124","https://openalex.org/W4205126818","https://openalex.org/W4210531213","https://openalex.org/W4229838822","https://openalex.org/W6600040774","https://openalex.org/W6602109874","https://openalex.org/W6635142715"],"related_works":["https://openalex.org/W2886285749","https://openalex.org/W2784943730","https://openalex.org/W201322543","https://openalex.org/W2969696505","https://openalex.org/W62667645","https://openalex.org/W1971030902","https://openalex.org/W2590094955","https://openalex.org/W2371529171","https://openalex.org/W2765343429","https://openalex.org/W2549460919"],"abstract_inverted_index":{"Transport":[0],"Layer":[1,9],"Security":[2],"(TLS)":[3],"and":[4,68,87,154,160],"its":[5,65,98],"precursor":[6],"Secure":[7],"Sockets":[8],"(SSL)":[10],"are":[11],"the":[12,39,71,84,104,114,126,148],"most":[13],"widely":[14],"deployed":[15],"protocol":[16,85],"to":[17,48,78,97,102,166],"establish":[18],"secure":[19,29],"communication":[20],"over":[21,70],"insecure":[22],"Internet":[23],"Protocol":[24],"(IP)":[25],"networks.":[26],"Providing":[27],"a":[28,79,111,121],"session":[30],"layer":[31,42,86],"on":[32],"top":[33],"of":[34,51,59,81,113,128,133,139,150,157],"TCP,":[35],"TLS":[36,75,116,152],"is":[37],"frequently":[38],"first":[40],"defense":[41],"encountered":[43],"by":[44,53],"adversaries":[45],"who":[46],"try":[47],"cause":[49],"loss":[50,58],"confidentiality":[52],"sniffing":[54],"live":[55],"traffic":[56],"or":[57],"integrity":[60],"using":[61],"man-in-the-middle":[62],"attacks.":[63],"Despite":[64],"wide":[66],"deployment":[67],"evolution":[69],"last":[72],"18":[73],"years,":[74],"remains":[76],"vulnerable":[77],"number":[80],"threats":[82],"at":[83],"therefore":[88],"does":[89],"not":[90],"provide":[91,103],"strong":[92],"security":[93,106,145],"out-of-the-box,":[94],"requiring":[95],"tweaks":[96],"configuration":[99,140],"in":[100,147],"order":[101],"expected":[105,158],"benefits.":[107],"This":[108],"paper":[109,135],"provides":[110],"summary":[112],"current":[115],"threat":[117],"surface":[118],"together":[119,143],"with":[120,163],"validated":[122],"approach":[123],"for":[124],"minimizing":[125],"risk":[127],"TLS-compromise.":[129],"The":[130],"main":[131],"contributions":[132],"this":[134],"include":[136],"1)":[137],"identification":[138],"options":[141],"that":[142],"maximize":[144],"guarantees":[146],"context":[149],"recent":[151],"exploits":[153],"2)":[155],"specification":[156],"flows":[159,165],"automated":[161],"comparison":[162],"observed":[164],"flag":[167],"inconsistencies.":[168]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}