{"id":"https://openalex.org/W3094639831","doi":"https://doi.org/10.1109/tifs.2020.3035265","title":"Locally-Centralized Certificate Validation and its Application in Desktop Virtualization Systems","display_name":"Locally-Centralized Certificate Validation and its Application in Desktop Virtualization Systems","publication_year":2020,"publication_date":"2020-11-02","ids":{"openalex":"https://openalex.org/W3094639831","doi":"https://doi.org/10.1109/tifs.2020.3035265","mag":"3094639831"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2020.3035265","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2020.3035265","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100683081","display_name":"Bingyu Li","orcid":"https://orcid.org/0000-0001-5925-1638"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Bingyu Li","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University (BUAA), Beijing, China","State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University (BUAA), Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075421344","display_name":"Jingqiang Lin","orcid":"https://orcid.org/0000-0003-2639-3722"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingqiang Lin","raw_affiliation_strings":["School of Cyber Security, University of Science and Technology of China, Hefei, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011886723","display_name":"Qiongxiao Wang","orcid":"https://orcid.org/0000-0002-8012-8295"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiongxiao Wang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100443565","display_name":"Ze Wang","orcid":"https://orcid.org/0009-0004-6220-4938"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ze Wang","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033745290","display_name":"Jiwu Jing","orcid":"https://orcid.org/0000-0002-3409-6149"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiwu Jing","raw_affiliation_strings":["School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100683081"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I82880672"],"apc_list":null,"apc_paid":null,"fwci":1.0605,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.8241982,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"16","issue":null,"first_page":"1380","last_page":"1395"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.830583393573761},{"id":"https://openalex.org/keywords/certificate-authority","display_name":"Certificate authority","score":0.7006992101669312},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.675000786781311},{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.6448442935943604},{"id":"https://openalex.org/keywords/root-certificate","display_name":"Root certificate","score":0.6200910806655884},{"id":"https://openalex.org/keywords/public-key-certificate","display_name":"Public key certificate","score":0.5881586074829102},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.56447434425354},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5197579264640808},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.5042294263839722},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5004270076751709},{"id":"https://openalex.org/keywords/revocation-list","display_name":"Revocation list","score":0.45159268379211426},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.2063281536102295},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.20085832476615906},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.1865483522415161}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.830583393573761},{"id":"https://openalex.org/C93636275","wikidata":"https://www.wikidata.org/wiki/Q196776","display_name":"Certificate authority","level":4,"score":0.7006992101669312},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.675000786781311},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.6448442935943604},{"id":"https://openalex.org/C62057728","wikidata":"https://www.wikidata.org/wiki/Q7366568","display_name":"Root certificate","level":5,"score":0.6200910806655884},{"id":"https://openalex.org/C167529545","wikidata":"https://www.wikidata.org/wiki/Q274758","display_name":"Public key certificate","level":4,"score":0.5881586074829102},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.56447434425354},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5197579264640808},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.5042294263839722},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5004270076751709},{"id":"https://openalex.org/C147296133","wikidata":"https://www.wikidata.org/wiki/Q196765","display_name":"Revocation list","level":5,"score":0.45159268379211426},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2063281536102295},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.20085832476615906},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.1865483522415161},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2020.3035265","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2020.3035265","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","score":0.41999998688697815,"display_name":"Partnerships for the goals"}],"awards":[{"id":"https://openalex.org/G1130126578","display_name":null,"funder_award_id":"61772518","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3235566538","display_name":null,"funder_award_id":"2020-ZD-05","funder_id":"https://openalex.org/F4320321133","funder_display_name":"Chinese Academy of Sciences"},{"id":"https://openalex.org/G4562745535","display_name":null,"funder_award_id":"62002011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":77,"referenced_works":["https://openalex.org/W94304979","https://openalex.org/W177815939","https://openalex.org/W1517949462","https://openalex.org/W1550000763","https://openalex.org/W1567409052","https://openalex.org/W1800976538","https://openalex.org/W1881935562","https://openalex.org/W1910624757","https://openalex.org/W1971739358","https://openalex.org/W1972788050","https://openalex.org/W1976919795","https://openalex.org/W1995989152","https://openalex.org/W1998244832","https://openalex.org/W2012001609","https://openalex.org/W2013433855","https://openalex.org/W2019016802","https://openalex.org/W2033067293","https://openalex.org/W2045057497","https://openalex.org/W2083547349","https://openalex.org/W2095738444","https://openalex.org/W2098383743","https://openalex.org/W2100314538","https://openalex.org/W2101889913","https://openalex.org/W2103370348","https://openalex.org/W2104899073","https://openalex.org/W2108111638","https://openalex.org/W2114398364","https://openalex.org/W2116876232","https://openalex.org/W2122538967","https://openalex.org/W2122913395","https://openalex.org/W2128551894","https://openalex.org/W2129426180","https://openalex.org/W2130867912","https://openalex.org/W2131861721","https://openalex.org/W2133592286","https://openalex.org/W2135359801","https://openalex.org/W2145994642","https://openalex.org/W2158699246","https://openalex.org/W2161954933","https://openalex.org/W2245281884","https://openalex.org/W2256307994","https://openalex.org/W2296570230","https://openalex.org/W2405267032","https://openalex.org/W2408340937","https://openalex.org/W2416597969","https://openalex.org/W2441077347","https://openalex.org/W2545335815","https://openalex.org/W2550748725","https://openalex.org/W2552873532","https://openalex.org/W2561324553","https://openalex.org/W2572577904","https://openalex.org/W2589704904","https://openalex.org/W2612070316","https://openalex.org/W2612544399","https://openalex.org/W2634547503","https://openalex.org/W2750954988","https://openalex.org/W2893413583","https://openalex.org/W2913966487","https://openalex.org/W2917075660","https://openalex.org/W2964141046","https://openalex.org/W3007918824","https://openalex.org/W3008428742","https://openalex.org/W3014156058","https://openalex.org/W3105355360","https://openalex.org/W4252834746","https://openalex.org/W4298051233","https://openalex.org/W6632930104","https://openalex.org/W6633706233","https://openalex.org/W6639214858","https://openalex.org/W6677217071","https://openalex.org/W6679151981","https://openalex.org/W6683814343","https://openalex.org/W6713561417","https://openalex.org/W6714030737","https://openalex.org/W6754812382","https://openalex.org/W6759556039","https://openalex.org/W6774941477"],"related_works":["https://openalex.org/W2300877280","https://openalex.org/W2277273755","https://openalex.org/W1588128868","https://openalex.org/W2111375600","https://openalex.org/W2596139382","https://openalex.org/W2131590289","https://openalex.org/W2360370532","https://openalex.org/W2247980666","https://openalex.org/W1544794558","https://openalex.org/W2391779328"],"abstract_inverted_index":{"To":[0,89],"validate":[1],"a":[2,4,55,116,250],"certificate,":[3],"user":[5,56],"needs":[6],"to":[7,57,99,121,146,150],"install":[8],"the":[9,12,19,30,65,83,90,97,107,114,123,133,163,173,178,180,202,209,232,240,247,256],"certificate":[10,20,31,193],"of":[11,35,92,109,125,165,183,227,234,239,258],"root":[13,37,43,185],"certification":[14],"authority":[15],"(CA)":[16],"and":[17,27,50,73,103,131,154,159,208,214,253],"download":[18],"revocation":[21],"information":[22],"(CRI).":[23],"Although":[24],"operating":[25],"systems":[26,149],"browsers":[28],"manage":[29,58,122],"trust":[32],"list":[33],"(CTL)":[34],"publicly-trusted":[36,184],"CAs":[38,44,186],"for":[39,54,136,205],"global":[40],"users,":[41,138],"locally-trusted":[42,192],"still":[45],"play":[46],"an":[47,87,140,228],"important":[48],"role":[49],"it":[51,230],"is":[52,68,119,195,212],"difficult":[53],"its":[59,152],"CTL":[60,101],"properly":[61,188],"by":[62,81,128,198,224],"itself.":[63],"Meanwhile,":[64],"CRI":[66,104,134,203,211,235,259],"access":[67,105,132],"inefficient,":[69],"sometimes":[70],"even":[71],"unavailable,":[72],"causes":[74],"privacy":[75],"leakage.":[76],"We":[77,142],"revisit":[78],"these":[79],"problems":[80],"analyzing":[82],"TLS":[84,220],"sessions":[85],"within":[86,139],"organization.":[88,141],"best":[91],"our":[93],"knowledge,":[94],"we":[95],"are":[96,170,187,222],"first":[98],"analyze":[100],"management":[102],"on":[106,113],"scale":[108],"medium-sized":[110],"organizations.":[111],"Based":[112],"analysis,":[115],"locally-centralized":[117],"design":[118,145],"proposed":[120],"CTLs":[124,164,248],"all":[126,137,166,206],"users":[127,226],"IT":[129],"administrators":[130],"services":[135,204],"apply":[143],"this":[144],"desktop":[147],"virtualization":[148],"demonstrate":[151],"applicability,":[153],"build":[155],"vCertGuard":[156,200,245],"with":[157,249],"oVirt":[158],"KVM-QEMU.":[160],"In":[161,177],"vCertGuard,":[162],"virtual":[167],"machines":[168],"(VMs)":[169],"managed":[171],"in":[172],"VM":[174],"monitors":[175],"(VMMs).":[176],"CTL,":[179],"self-signed":[181],"certificates":[182],"configured,":[189],"while":[190],"each":[191],"chain":[194],"specified":[196],"one":[197],"one.":[199],"accesses":[201],"VMs,":[207],"downloaded":[210],"cached":[213],"shared":[215],"among":[216],"VMs.":[217],"Because":[218],"most":[219],"servers":[221],"visited":[223],"multiple":[225],"organization,":[229],"reduces":[231],"cost":[233],"access.":[236,260],"Experimental":[237],"results":[238],"prototype":[241],"system":[242],"show":[243],"that":[244],"maintains":[246],"negligible":[251],"overhead,":[252],"significantly":[254],"improves":[255],"performance":[257]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
