{"id":"https://openalex.org/W4409356573","doi":"https://doi.org/10.1109/jsac.2025.3560006","title":"A Zero Trust Data-Driven Perspective on PKI Root Stores","display_name":"A Zero Trust Data-Driven Perspective on PKI Root Stores","publication_year":2025,"publication_date":"2025-04-11","ids":{"openalex":"https://openalex.org/W4409356573","doi":"https://doi.org/10.1109/jsac.2025.3560006"},"language":"en","primary_location":{"id":"doi:10.1109/jsac.2025.3560006","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jsac.2025.3560006","pdf_url":null,"source":{"id":"https://openalex.org/S90422530","display_name":"IEEE Journal on Selected Areas in Communications","issn_l":"0733-8716","issn":["0733-8716","1558-0008"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Journal on Selected Areas in Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Mauro Farina","orcid":null},"institutions":[{"id":"https://openalex.org/I142444530","display_name":"University of Trieste","ror":"https://ror.org/02n742c10","country_code":"IT","type":"education","lineage":["https://openalex.org/I142444530"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mauro Farina","raw_affiliation_strings":["Department of Engineering and Architecture, University of Trieste, Trieste, Italy","Department of Engineering and Architecture, University of Trieste, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]},{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5095868878","display_name":"Damiano Ravalico","orcid":"https://orcid.org/0009-0001-9631-4252"},"institutions":[{"id":"https://openalex.org/I142444530","display_name":"University of Trieste","ror":"https://ror.org/02n742c10","country_code":"IT","type":"education","lineage":["https://openalex.org/I142444530"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Damiano Ravalico","raw_affiliation_strings":["Department of Engineering and Architecture, University of Trieste, Trieste, Italy","Department of Engineering and Architecture, University of Trieste, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]},{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061815649","display_name":"Martino Trevisan","orcid":"https://orcid.org/0000-0002-4258-4679"},"institutions":[{"id":"https://openalex.org/I142444530","display_name":"University of Trieste","ror":"https://ror.org/02n742c10","country_code":"IT","type":"education","lineage":["https://openalex.org/I142444530"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Martino Trevisan","raw_affiliation_strings":["Department of Engineering and Architecture, University of Trieste, Trieste, Italy","Department of Engineering and Architecture, University of Trieste, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]},{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019727872","display_name":"Alberto Bartoli","orcid":"https://orcid.org/0000-0003-4132-416X"},"institutions":[{"id":"https://openalex.org/I142444530","display_name":"University of Trieste","ror":"https://ror.org/02n742c10","country_code":"IT","type":"education","lineage":["https://openalex.org/I142444530"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alberto Bartoli","raw_affiliation_strings":["Department of Engineering and Architecture, University of Trieste, Trieste, Italy","Department of Engineering and Architecture, University of Trieste, Italy"],"raw_orcid":"https://orcid.org/0000-0003-4132-416X","affiliations":[{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]},{"raw_affiliation_string":"Department of Engineering and Architecture, University of Trieste, Italy","institution_ids":["https://openalex.org/I142444530"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I142444530"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":3.5805,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.92438828,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"43","issue":"6","first_page":"2200","last_page":"2214"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9912999868392944,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9912999868392944,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9678999781608582,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9490000009536743,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7602338790893555},{"id":"https://openalex.org/keywords/public-key-infrastructure","display_name":"Public key infrastructure","score":0.7218188643455505},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.5712469816207886},{"id":"https://openalex.org/keywords/zero","display_name":"Zero (linguistics)","score":0.48664793372154236},{"id":"https://openalex.org/keywords/root","display_name":"Root (linguistics)","score":0.46923476457595825},{"id":"https://openalex.org/keywords/zero-knowledge-proof","display_name":"Zero-knowledge proof","score":0.4543234407901764},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.40058308839797974},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3498910069465637},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.34423911571502686},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3113481402397156},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1124601662158966},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.08985060453414917}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7602338790893555},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.7218188643455505},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5712469816207886},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.48664793372154236},{"id":"https://openalex.org/C171078966","wikidata":"https://www.wikidata.org/wiki/Q111029","display_name":"Root (linguistics)","level":2,"score":0.46923476457595825},{"id":"https://openalex.org/C176329583","wikidata":"https://www.wikidata.org/wiki/Q191943","display_name":"Zero-knowledge proof","level":3,"score":0.4543234407901764},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.40058308839797974},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3498910069465637},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.34423911571502686},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3113481402397156},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1124601662158966},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.08985060453414917},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/jsac.2025.3560006","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jsac.2025.3560006","pdf_url":null,"source":{"id":"https://openalex.org/S90422530","display_name":"IEEE Journal on Selected Areas in Communications","issn_l":"0733-8716","issn":["0733-8716","1558-0008"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Journal on Selected Areas in Communications","raw_type":"journal-article"},{"id":"pmh:oai:arts.units.it:11368/3110664","is_oa":false,"landing_page_url":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=10963977","pdf_url":null,"source":{"id":"https://openalex.org/S4306400480","display_name":"ArTS Archivio della ricerca di Trieste (University of Trieste https://www.units.it/)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I142444530","host_organization_name":"University of Trieste","host_organization_lineage":["https://openalex.org/I142444530"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W177815939","https://openalex.org/W1918352945","https://openalex.org/W2084149749","https://openalex.org/W2101571537","https://openalex.org/W2104899073","https://openalex.org/W2162600177","https://openalex.org/W2552873532","https://openalex.org/W2899471681","https://openalex.org/W2965754636","https://openalex.org/W3094639831","https://openalex.org/W3210059027","https://openalex.org/W4206115915","https://openalex.org/W4283745693","https://openalex.org/W4285205927","https://openalex.org/W4317603376","https://openalex.org/W4385366999","https://openalex.org/W4388644555","https://openalex.org/W4390604115","https://openalex.org/W4392964577","https://openalex.org/W4393308520","https://openalex.org/W4400977096","https://openalex.org/W4401322269","https://openalex.org/W6632930104","https://openalex.org/W6638052431","https://openalex.org/W6768824220","https://openalex.org/W6941415678"],"related_works":["https://openalex.org/W2763050151","https://openalex.org/W2001371286","https://openalex.org/W1606380665","https://openalex.org/W1915479549","https://openalex.org/W2994213367","https://openalex.org/W2036546368","https://openalex.org/W1955053247","https://openalex.org/W1484754451","https://openalex.org/W2104283649","https://openalex.org/W1494030766"],"abstract_inverted_index":{"Security":[0],"and":[1,47,53,94,105,113],"privacy":[2],"on":[3,7,16,91],"the":[4,8,28,33,36,43,51,62,92,115,138,156,161,176],"Internet":[5],"rely":[6],"Public":[9],"Key":[10],"Infrastructure":[11],"(PKI),":[12],"which":[13],"is":[14,38],"based":[15],"unlimited":[17],"trust":[18,55,65,73,89,130,142],"in":[19,27,160],"a":[20,67,87,189,192],"set":[21],"of":[22,35,117,141,155,175,178],"predefined":[23],"certification":[24,58],"authorities":[25,59],"included":[26,159],"users\u2019":[29,103],"root":[30,95,118,134,146,157,163,197],"stores.":[31,147],"However,":[32],"architecture":[34],"PKI":[37,93],"no":[39],"longer":[40],"appropriate":[41],"for":[42,123,168,188,195],"current":[44],"threat":[45],"landscape":[46],"security":[48,201],"principles.":[49,202],"Specifically,":[50],"implicit":[52],"permanent":[54],"given":[56],"to":[57,81,132],"collides":[60],"with":[61,199],"rising":[63],"zero":[64,88,129],"approach,":[66],"cyber-security":[68],"model":[69],"that":[70,72,120,136,151],"mandates":[71],"must":[74],"never":[75],"be":[76],"granted":[77],"implicitly":[78],"or":[79],"permanently":[80],"any":[82],"entity.":[83],"This":[84],"work":[85],"offers":[86],"perspective":[90],"store":[96,164],"composition.":[97],"Using":[98],"navigation":[99],"datasets":[100],"collected":[101],"from":[102],"browsers":[104],"passive":[106],"monitors,":[107],"we":[108],"analyze":[109],"their":[110,124],"actual":[111],"needs":[112],"identify":[114],"portion":[116],"stores":[119,135,198],"are":[121,165],"useful":[122],"activity.":[125],"We":[126],"propose":[127],"several":[128],"policies":[131,184],"manage":[133],"shrink":[137],"large":[139],"perimeter":[140],"allowed":[143],"by":[144],"commercial":[145],"Our":[148],"experiments":[149],"show":[150],"less":[152],"than":[153],"half":[154],"certificates":[158],"Mozilla":[162],"indeed":[166],"used":[167],"navigation,":[169],"while":[170],"only":[171],"14":[172],"cover":[173],"99%":[174],"traffic":[177],"our":[179],"users.":[180],"Moreover,":[181],"implementing":[182],"such":[183],"requires":[185],"little":[186],"effort":[187],"company,":[190],"providing":[191],"practical":[193],"way":[194],"managing":[196],"up-to-date":[200]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}