{"id":"https://openalex.org/W4211201399","doi":"https://doi.org/10.1109/cns53000.2021.9705023","title":"Very Pwnable Network: Cisco AnyConnect Security Analysis","display_name":"Very Pwnable Network: Cisco AnyConnect Security Analysis","publication_year":2021,"publication_date":"2021-10-04","ids":{"openalex":"https://openalex.org/W4211201399","doi":"https://doi.org/10.1109/cns53000.2021.9705023"},"language":"en","primary_location":{"id":"doi:10.1109/cns53000.2021.9705023","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns53000.2021.9705023","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021619991","display_name":"Gerbert Roitburd","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Gerbert Roitburd","raw_affiliation_strings":["SEEMOO,TU Darmsdtadt","SEEMOO, TU Darmsdtadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SEEMOO,TU Darmsdtadt","institution_ids":["https://openalex.org/I31512782"]},{"raw_affiliation_string":"SEEMOO, TU Darmsdtadt","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044280180","display_name":"Matthias Ortmann","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Matthias Ortmann","raw_affiliation_strings":["SEEMOO,TU Darmsdtadt","SEEMOO, TU Darmsdtadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SEEMOO,TU Darmsdtadt","institution_ids":["https://openalex.org/I31512782"]},{"raw_affiliation_string":"SEEMOO, TU Darmsdtadt","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042405070","display_name":"Matthias Hollick","orcid":"https://orcid.org/0000-0002-9163-5989"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Matthias Hollick","raw_affiliation_strings":["SEEMOO,TU Darmsdtadt","SEEMOO, TU Darmsdtadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SEEMOO,TU Darmsdtadt","institution_ids":["https://openalex.org/I31512782"]},{"raw_affiliation_string":"SEEMOO, TU Darmsdtadt","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016475244","display_name":"Jiska Classen","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jiska Classen","raw_affiliation_strings":["SEEMOO,TU Darmsdtadt","SEEMOO, TU Darmsdtadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SEEMOO,TU Darmsdtadt","institution_ids":["https://openalex.org/I31512782"]},{"raw_affiliation_string":"SEEMOO, TU Darmsdtadt","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I31512782"],"apc_list":null,"apc_paid":null,"fwci":0.2713,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.48796764,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"56","last_page":"64"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7146999835968018,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7146999835968018,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.6761000156402588,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.6277999877929688,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6943981647491455},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security analysis","score":0.41388148069381714},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.40595805644989014},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33205655217170715}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6943981647491455},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.41388148069381714},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.40595805644989014},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33205655217170715}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/cns53000.2021.9705023","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns53000.2021.9705023","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},{"id":"pmh:oai:tubiblio.ulb.tu-darmstadt.de:130934","is_oa":false,"landing_page_url":"http://tubiblio.ulb.tu-darmstadt.de/130934/","pdf_url":null,"source":{"id":"https://openalex.org/S4377196390","display_name":"TUbilio (Technical University of Darmstadt)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I31512782","host_organization_name":"Technische Universit\u00e4t Darmstadt","host_organization_lineage":["https://openalex.org/I31512782"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Konferenzver\u00f6ffentlichung"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6499999761581421,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320311687","display_name":"Ministry of Education","ror":"https://ror.org/03m01yf64"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W4402327032","https://openalex.org/W2382290278"],"abstract_inverted_index":{"Corporate":[0],"Virtual":[1],"Private":[2],"Networks":[3],"(VPNs)":[4],"enable":[5],"users":[6,27,59],"to":[7,21,28,42,57,184,193],"work":[8],"from":[9],"home":[10],"or":[11],"while":[12],"traveling.":[13],"At":[14],"the":[15,63,67,93,119,135,151],"same":[16],"time,":[17],"VPNs":[18,188],"are":[19,103,132,190],"tied":[20],"a":[22,54,160],"company\u2019s":[23],"network":[24,33,46,72,180],"infrastructure,":[25],"forcing":[26],"install":[29],"proprietary":[30],"clients":[31,37,52],"for":[32,81,141],"compatibility":[34],"reasons.":[35],"VPN":[36,51,75],"run":[38],"with":[39,77,159],"high":[40],"privileges":[41],"encrypt":[43],"and":[44,60,83,101,108,123,189],"reroute":[45],"traffic.":[47],"Thus,":[48],"bugs":[49,171],"in":[50,61,134,150,178],"pose":[53],"substantial":[55],"risk":[56],"their":[58,78],"turn":[62],"corporate":[64],"network.":[65],"Cisco,":[66],"dominating":[68],"vendor":[69],"of":[70,130,187],"enterprise":[71],"hardware,":[73],"offers":[74],"connectivity":[76],"AnyConnect":[79,94],"client":[80],"desktop":[82],"mobile":[84],"devices.":[85],"While":[86],"past":[87],"security":[88,111],"research":[89],"primarily":[90],"focused":[91],"on":[92,105,144,166],"Windows":[95],"client,":[96],"we":[97],"show":[98],"that":[99,154],"Linux":[100,136,145],"iOS":[102,167,179],"based":[104],"different":[106],"architectures":[107],"have":[109],"distinct":[110],"issues.":[112],"Our":[113],"reverse":[114],"engineering":[115],"as":[116,118,172,174],"well":[117,173],"follow-up":[120],"design":[121],"analysis":[122,165],"fuzzing":[124],"reveal":[125],"13":[126],"new":[127],"vulnerabilities.":[128],"Seven":[129],"these":[131],"located":[133],"client.":[137],"The":[138],"root":[139],"cause":[140],"privilege":[142],"escalations":[143],"is":[146],"anchored":[147],"so":[148],"deep":[149],"client\u2019s":[152],"architecture":[153],"it":[155],"only":[156],"got":[157],"patched":[158],"partial":[161],"workaround.":[162],"A":[163],"similar":[164],"uncovers":[168],"three":[169,175],"AnyConnect-specific":[170],"general":[176],"issues":[177],"extensions,":[181],"which":[182],"apply":[183],"all":[185],"kinds":[186],"not":[191],"restricted":[192],"AnyConnect.":[194]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}