{"id":"https://openalex.org/W4324116417","doi":"https://doi.org/10.1109/tdsc.2023.3255869","title":"On the Complexity of the Web\u2019s PKI: Evaluating Certificate Validation of Mobile Browsers","display_name":"On the Complexity of the Web\u2019s PKI: Evaluating Certificate Validation of Mobile Browsers","publication_year":2023,"publication_date":"2023-03-13","ids":{"openalex":"https://openalex.org/W4324116417","doi":"https://doi.org/10.1109/tdsc.2023.3255869"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3255869","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3255869","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071019154","display_name":"Meng Luo","orcid":"https://orcid.org/0000-0001-9018-1367"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Luo","raw_affiliation_strings":["School of Cyber Science and Technology &#x0026; ZJU-Hangzhou Global Scientific and Technological Innovation Center, Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0001-9018-1367","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology &#x0026; ZJU-Hangzhou Global Scientific and Technological Innovation Center, Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100778553","display_name":"Bo Feng","orcid":"https://orcid.org/0000-0001-9764-7457"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bo Feng","raw_affiliation_strings":["School of Cybersecurity and Privacy, College of Computing, Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":"https://orcid.org/0000-0001-9764-7457","affiliations":[{"raw_affiliation_string":"School of Cybersecurity and Privacy, College of Computing, Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013217302","display_name":"Long Lu","orcid":"https://orcid.org/0000-0003-1550-479X"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Long Lu","raw_affiliation_strings":["Khoury College of Computer Sciences, Northeastern University, Boston, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Khoury College of Computer Sciences, Northeastern University, Boston, MA, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077875821","display_name":"Engin Kirda","orcid":"https://orcid.org/0000-0001-9988-6873"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Engin Kirda","raw_affiliation_strings":["Khoury College of Computer Sciences, Northeastern University, Boston, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Khoury College of Computer Sciences, Northeastern University, Boston, MA, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105297718","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0002-1969-2591"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["School of Cyber Science and Technology &#x0026; ZJU-Hangzhou Global Scientific and Technological Innovation Center, Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0002-1969-2591","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology &#x0026; ZJU-Hangzhou Global Scientific and Technological Innovation Center, Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I168879160"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.7449,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.95111037,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"21","issue":"1","first_page":"419","last_page":"433"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7465091347694397},{"id":"https://openalex.org/keywords/public-key-infrastructure","display_name":"Public key infrastructure","score":0.6871883869171143},{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.5352248549461365},{"id":"https://openalex.org/keywords/public-key-certificate","display_name":"Public key certificate","score":0.5160548090934753},{"id":"https://openalex.org/keywords/root-certificate","display_name":"Root certificate","score":0.4775865077972412},{"id":"https://openalex.org/keywords/authorization-certificate","display_name":"Authorization certificate","score":0.4231565594673157},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4045370817184448},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.20701521635055542},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.09651783108711243}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7465091347694397},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.6871883869171143},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.5352248549461365},{"id":"https://openalex.org/C167529545","wikidata":"https://www.wikidata.org/wiki/Q274758","display_name":"Public key certificate","level":4,"score":0.5160548090934753},{"id":"https://openalex.org/C62057728","wikidata":"https://www.wikidata.org/wiki/Q7366568","display_name":"Root certificate","level":5,"score":0.4775865077972412},{"id":"https://openalex.org/C175093008","wikidata":"https://www.wikidata.org/wiki/Q758251","display_name":"Authorization certificate","level":5,"score":0.4231565594673157},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4045370817184448},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.20701521635055542},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.09651783108711243},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3255869","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3255869","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3322904226","display_name":null,"funder_award_id":"CNS-2127200","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G3489595043","display_name":null,"funder_award_id":"62032021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4453172388","display_name":null,"funder_award_id":"2019C03133","funder_id":"https://openalex.org/F8142712028","funder_display_name":"Key Research and Development Program of Zhejiang Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335353","display_name":"National Science Foundation of Sri Lanka","ror":"https://ror.org/010xaa060"},{"id":"https://openalex.org/F8142712028","display_name":"Key Research and Development Program of Zhejiang Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W1425767035","https://openalex.org/W1517949462","https://openalex.org/W1584830792","https://openalex.org/W1920390248","https://openalex.org/W1976919795","https://openalex.org/W2008524185","https://openalex.org/W2019016802","https://openalex.org/W2042676624","https://openalex.org/W2050053627","https://openalex.org/W2054426341","https://openalex.org/W2056494114","https://openalex.org/W2100314538","https://openalex.org/W2103370348","https://openalex.org/W2104899073","https://openalex.org/W2129830111","https://openalex.org/W2130867912","https://openalex.org/W2470176151","https://openalex.org/W2532335977","https://openalex.org/W2545335815","https://openalex.org/W2550748725","https://openalex.org/W2612070316","https://openalex.org/W2634547503","https://openalex.org/W2650293344","https://openalex.org/W2672575173","https://openalex.org/W2754568388","https://openalex.org/W2755252385","https://openalex.org/W2765827436","https://openalex.org/W2772422830","https://openalex.org/W2794584163","https://openalex.org/W2805984568","https://openalex.org/W2889666008","https://openalex.org/W2899471681","https://openalex.org/W2948008293","https://openalex.org/W2966953384","https://openalex.org/W2990503390","https://openalex.org/W3015762016","https://openalex.org/W3016862388","https://openalex.org/W3035280263","https://openalex.org/W3101275604","https://openalex.org/W3212377246","https://openalex.org/W4233819588","https://openalex.org/W4298051233","https://openalex.org/W4306179547","https://openalex.org/W4308644329","https://openalex.org/W6679151981","https://openalex.org/W6740744476","https://openalex.org/W6754318490","https://openalex.org/W6795495979"],"related_works":["https://openalex.org/W2376373997","https://openalex.org/W2144907754","https://openalex.org/W4388829360","https://openalex.org/W2361062383","https://openalex.org/W3091805520","https://openalex.org/W4239897160","https://openalex.org/W4253144255","https://openalex.org/W2181703223","https://openalex.org/W4240158903","https://openalex.org/W125547318"],"abstract_inverted_index":{"Digital":[0],"certificates":[1,144],"are":[2,187],"frequently":[3],"used":[4],"to":[5,14,71,92,160,189,192],"secure":[6,20],"communications":[7],"between":[8],"users":[9,164,191],"and":[10,31,59,104,122,145,177,197],"web":[11],"servers.":[12],"Critical":[13],"the":[15,19,56,63,73,132,156,175],"Web\u2019s":[16],"PKI":[17],"is":[18,29,35],"validation":[21,27,65,98,181],"of":[22,41,62,75,158,179],"digital":[23],"certificates.":[24],"Nonetheless,":[25],"certificate":[26,64,97,180],"itself":[28],"complex":[30],"error-prone.":[32],"Moreover,":[33],"it":[34,77],"also":[36],"undermined":[37],"by":[38,163],"particular":[39],"constraints":[40],"mobile":[42,69,119,134,184],"browsers.":[43,81,129],"However,":[44],"these":[45],"issues":[46],"have":[47,167],"long":[48],"been":[49],"overlooked.":[50],"In":[51],"this":[52,83],"article,":[53],"we":[54,85,111],"undertook":[55],"first":[57,86],"systematic":[58],"large-scale":[60],"study":[61],"mechanism":[66],"within":[67],"popular":[68,115],"browsers":[70,116,135],"highlight":[72],"necessity":[74],"reassessing":[76],"among":[78],"all":[79],"released":[80],"To":[82],"end,":[84],"compile":[87],"a":[88,106],"comprehensive":[89],"test":[90],"suite":[91],"identify":[93],"security":[94],"flaws":[95,182],"in":[96],"from":[99],"various":[100],"aspects.":[101],"By":[102],"designing":[103],"implementing":[105],"generic,":[107],"automated":[108],"testing":[109],"pipeline,":[110],"effectively":[112],"evaluate":[113],"30":[114],"on":[117,153,174],"two":[118],"OS":[120],"versions":[121],"compare":[123],"them":[124,159],"with":[125],"five":[126],"representative":[127],"desktop":[128],"We":[130],"found":[131],"latest":[133],"<monospace":[136,146],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[137,147],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Accept</monospace>":[138],"as":[139,141],"many":[140],"33.2%":[142],"invalid":[143,151],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Reject</monospace>":[148],"merely":[149],"5.4%":[150],"ones":[152],"average,":[154],"leaving":[155],"majority":[157],"be":[161],"decided":[162],"who":[165],"usually":[166],"little":[168],"expertise.":[169],"Our":[170],"findings":[171],"shed":[172],"light":[173],"severity":[176],"inconsistency":[178],"across":[183],"browsers,":[185],"which":[186],"likely":[188],"expose":[190],"MITM":[193],"attacks,":[194,196],"spoofing":[195],"so":[198],"forth.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}