{"id":"https://openalex.org/W3199968393","doi":"https://doi.org/10.1109/tifs.2021.3113512","title":"A Co-Design Adaptive Defense Scheme With Bounded Security Damages Against Heartbleed-Like Attacks","display_name":"A Co-Design Adaptive Defense Scheme With Bounded Security Damages Against Heartbleed-Like Attacks","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3199968393","doi":"https://doi.org/10.1109/tifs.2021.3113512","mag":"3199968393"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2021.3113512","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3113512","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021769053","display_name":"Zhisheng Hu","orcid":"https://orcid.org/0000-0003-1940-9829"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Zhisheng Hu","raw_affiliation_strings":["Baidu Security, Sunnyvale, CA 94089"],"affiliations":[{"raw_affiliation_string":"Baidu Security, Sunnyvale, CA 94089","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102000233","display_name":"Ping Chen","orcid":"https://orcid.org/0000-0002-8517-0580"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ping Chen","raw_affiliation_strings":["Institute for Big Data, Fudan University Shanghai, China 200433. (e-mail: chenping19851@hotmail.com)"],"affiliations":[{"raw_affiliation_string":"Institute for Big Data, Fudan University Shanghai, China 200433. (e-mail: chenping19851@hotmail.com)","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101766328","display_name":"Minghui Zhu","orcid":"https://orcid.org/0000-0003-3879-7820"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Minghui Zhu","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, Pennsylvania State University, University Park, PA 16802"],"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Pennsylvania State University, University Park, PA 16802","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Liu","raw_affiliation_strings":["College of Information Sciences and Technology, Pennsylvania State University, University Park, PA 16802"],"affiliations":[{"raw_affiliation_string":"College of Information Sciences and Technology, Pennsylvania State University, University Park, PA 16802","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5021769053"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9169,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.76336201,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"16","issue":null,"first_page":"4691","last_page":"4704"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.991100013256073,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8017383813858032},{"id":"https://openalex.org/keywords/damages","display_name":"Damages","score":0.749577522277832},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.684651255607605},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.5292937755584717},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.5210268497467041},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.45639556646347046},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4026075005531311},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10397180914878845}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8017383813858032},{"id":"https://openalex.org/C2777381055","wikidata":"https://www.wikidata.org/wiki/Q308922","display_name":"Damages","level":2,"score":0.749577522277832},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.684651255607605},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.5292937755584717},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.5210268497467041},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.45639556646347046},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4026075005531311},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10397180914878845},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2021.3113512","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3113512","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2086314269","display_name":null,"funder_award_id":"W911NF-13-1-0421 (MURI)","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G4670790475","display_name":null,"funder_award_id":"H98230-15-1-0289","funder_id":"https://openalex.org/F4320311089","funder_display_name":"National Security Agency"},{"id":"https://openalex.org/G5141348516","display_name":null,"funder_award_id":"CNS-2019340","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G676071007","display_name":null,"funder_award_id":"CNS-1422594","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G7783715049","display_name":null,"funder_award_id":"ECCS-1710859","funder_id":"https://openalex.org/F4320337392","funder_display_name":"Division of Electrical, Communications and Cyber Systems"},{"id":"https://openalex.org/G8027891421","display_name":null,"funder_award_id":"CNS-1814679","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"}],"funders":[{"id":"https://openalex.org/F4320311089","display_name":"National Security Agency","ror":"https://ror.org/0047bvr32"},{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"},{"id":"https://openalex.org/F4320337392","display_name":"Division of Electrical, Communications and Cyber Systems","ror":"https://ror.org/01krpsy48"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1486613786","https://openalex.org/W1504976174","https://openalex.org/W1544426622","https://openalex.org/W1946775303","https://openalex.org/W1965555277","https://openalex.org/W2009551863","https://openalex.org/W2112736324","https://openalex.org/W2114604089","https://openalex.org/W2136938453","https://openalex.org/W2168405694","https://openalex.org/W2188774998","https://openalex.org/W6632462264","https://openalex.org/W6687258532"],"related_works":["https://openalex.org/W4205240985","https://openalex.org/W2314597598","https://openalex.org/W1527183021","https://openalex.org/W3124239800","https://openalex.org/W2365977737","https://openalex.org/W1577024311","https://openalex.org/W4387399630","https://openalex.org/W1494001639","https://openalex.org/W2170856278","https://openalex.org/W2370590861"],"abstract_inverted_index":{"This":[0],"paper":[1],"proposes":[2],"a":[3,9,33,45,78,92],"co-design":[4,25,136],"adaptive":[5,159],"defense":[6,121,160],"scheme":[7,26,113,137],"against":[8,163],"class":[10],"of":[11,51,67,111,118,151,167],"zero-day":[12],"buffer":[13,89],"over-read":[14],"attacks":[15,126,166],"that":[16,157],"follow":[17],"unknown":[18],"stationary":[19,94],"probability":[20,95],"distributions.":[21],"In":[22],"particular,":[23],"the":[24,52,59,68,88,109,119,124,135,149,152,158,165],"integrates":[27],"an":[28,98],"improved":[29,37,69],"UCB":[30,38,70],"algorithm":[31,39,71],"and":[32,127,155],"customized":[34],"server.":[35],"The":[36,64,145],"adaptively":[40],"allocates":[41],"guard":[42,53],"pages":[43,54],"on":[44,48],"heap":[46],"based":[47],"induced":[49],"damage":[50,61],"so":[55],"as":[56,172,174],"to":[57,74,104,116],"minimize":[58],"accumulated":[60],"over":[62],"time.":[63],"security":[65],"damages":[66,110],"are":[72,130],"proven":[73],"be":[75],"always":[76],"below":[77],"temporal":[79],"bound":[80,154],"without":[81],"knowing":[82],"which":[83],"attack":[84],"is":[85,102,138,161],"launched":[86,125],"when":[87],"allocation":[90],"follows":[91],"certain":[93],"distribution.":[96],"Then":[97],"efficient":[99],"server":[100],"modification":[101],"introduced":[103],"randomly":[105],"allocate":[106],"buffers.":[107],"Moreover,":[108],"our":[112],"asymptotically":[114],"converge":[115],"those":[117],"optimal":[120],"policy":[122],"where":[123],"their":[128],"distributions":[129],"known":[131],"in":[132],"advance.":[133],"Further,":[134],"evaluated":[139],"with":[140,169],"several":[141],"real-world":[142],"Heartbleed":[143],"attacks.":[144],"experiment":[146],"results":[147],"demonstrate":[148],"validity":[150],"upper":[153],"show":[156],"effective":[162],"all":[164],"interest":[168],"runtime":[170],"overheads":[171],"low":[173],"5%.":[175]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
