{"id":"https://openalex.org/W4404520331","doi":"https://doi.org/10.1109/tnet.2024.3495617","title":"Measuring and Characterizing Propagation of Reuse RSA Certificates and Keys Across PKI Ecosystem","display_name":"Measuring and Characterizing Propagation of Reuse RSA Certificates and Keys Across PKI Ecosystem","publication_year":2024,"publication_date":"2024-11-19","ids":{"openalex":"https://openalex.org/W4404520331","doi":"https://doi.org/10.1109/tnet.2024.3495617"},"language":"en","primary_location":{"id":"doi:10.1109/tnet.2024.3495617","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2024.3495617","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093387513","display_name":"Fatemeh Nezhadian","orcid":"https://orcid.org/0009-0009-7206-8614"},"institutions":[{"id":"https://openalex.org/I32625721","display_name":"University of Saskatchewan","ror":"https://ror.org/010x8gc63","country_code":"CA","type":"education","lineage":["https://openalex.org/I32625721"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Fatemeh Nezhadian","raw_affiliation_strings":["Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada"],"raw_orcid":"https://orcid.org/0009-0009-7206-8614","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada","institution_ids":["https://openalex.org/I32625721"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073311317","display_name":"Enrico Branca","orcid":"https://orcid.org/0000-0001-6316-7789"},"institutions":[{"id":"https://openalex.org/I32625721","display_name":"University of Saskatchewan","ror":"https://ror.org/010x8gc63","country_code":"CA","type":"education","lineage":["https://openalex.org/I32625721"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Enrico Branca","raw_affiliation_strings":["Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6316-7789","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada","institution_ids":["https://openalex.org/I32625721"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093915000","display_name":"Anna Barzolevskaia","orcid":null},"institutions":[{"id":"https://openalex.org/I32625721","display_name":"University of Saskatchewan","ror":"https://ror.org/010x8gc63","country_code":"CA","type":"education","lineage":["https://openalex.org/I32625721"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Anna Barzolevskaia","raw_affiliation_strings":["Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada","institution_ids":["https://openalex.org/I32625721"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092322289","display_name":"Andrei Natadze","orcid":"https://orcid.org/0000-0003-2764-0991"},"institutions":[{"id":"https://openalex.org/I32625721","display_name":"University of Saskatchewan","ror":"https://ror.org/010x8gc63","country_code":"CA","type":"education","lineage":["https://openalex.org/I32625721"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Andrei Natadze","raw_affiliation_strings":["Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada","institution_ids":["https://openalex.org/I32625721"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042013797","display_name":"Natalia Stakhanova","orcid":"https://orcid.org/0000-0003-1923-319X"},"institutions":[{"id":"https://openalex.org/I32625721","display_name":"University of Saskatchewan","ror":"https://ror.org/010x8gc63","country_code":"CA","type":"education","lineage":["https://openalex.org/I32625721"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Natalia Stakhanova","raw_affiliation_strings":["Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada"],"raw_orcid":"https://orcid.org/0000-0003-1923-319X","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Saskatchewan, Saskatoon, SK, Canada","institution_ids":["https://openalex.org/I32625721"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I32625721"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":1.6848,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.882095,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"33","issue":"2","first_page":"595","last_page":"611"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.6985999941825867,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.6985999941825867,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/public-key-infrastructure","display_name":"Public key infrastructure","score":0.8644107580184937},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.6015809774398804},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.44183269143104553},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3447238802909851},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.28728097677230835},{"id":"https://openalex.org/keywords/ecology","display_name":"Ecology","score":0.13055622577667236},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.12001484632492065}],"concepts":[{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.8644107580184937},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.6015809774398804},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.44183269143104553},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3447238802909851},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.28728097677230835},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.13055622577667236},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.12001484632492065},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnet.2024.3495617","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2024.3495617","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1910624757","https://openalex.org/W1974390525","https://openalex.org/W2008810193","https://openalex.org/W2019016802","https://openalex.org/W2076745395","https://openalex.org/W2077667328","https://openalex.org/W2112736324","https://openalex.org/W2130867912","https://openalex.org/W2146923862","https://openalex.org/W2294157280","https://openalex.org/W2511395838","https://openalex.org/W2538863639","https://openalex.org/W2550748725","https://openalex.org/W2554129713","https://openalex.org/W2595752505","https://openalex.org/W2634547503","https://openalex.org/W2766724343","https://openalex.org/W2766980353","https://openalex.org/W2807181794","https://openalex.org/W2897859437","https://openalex.org/W2909182817","https://openalex.org/W2915352631","https://openalex.org/W2963945982","https://openalex.org/W3035720390","https://openalex.org/W3091169353","https://openalex.org/W3206818901","https://openalex.org/W3209689535","https://openalex.org/W3212981206","https://openalex.org/W4213190682","https://openalex.org/W4229709357","https://openalex.org/W4233819588","https://openalex.org/W4246562921","https://openalex.org/W4256571961","https://openalex.org/W4298051233","https://openalex.org/W4389195527","https://openalex.org/W6638340054","https://openalex.org/W6671709667","https://openalex.org/W6677217071","https://openalex.org/W6678042037","https://openalex.org/W6679724985","https://openalex.org/W6723498726","https://openalex.org/W6754244605","https://openalex.org/W6755348377","https://openalex.org/W6929192220"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2387152933","https://openalex.org/W2356023093","https://openalex.org/W4230009347","https://openalex.org/W2106808815","https://openalex.org/W2366509263","https://openalex.org/W2130867912","https://openalex.org/W2511395838"],"abstract_inverted_index":{"The":[0,18],"insecurities":[1],"of":[2,12,21,39,48,55,64,82,96,132,144,192],"public-key":[3],"infrastructure":[4],"on":[5,68],"the":[6,10,36,46,53,62,69,87,92,129,140],"Internet":[7,70],"have":[8],"been":[9,29],"focus":[11],"research":[13],"for":[14,188],"over":[15,110,115,161],"a":[16,79,106],"decade.":[17],"extensive":[19],"presence":[20,47,93],"broken,":[22],"weak,":[23],"and":[24,94,100,114,135,138,142,151,156,165,174],"vulnerable":[25],"cryptographic":[26,40,130,184],"keys":[27,104,119,137,169,181],"has":[28],"repeatedly":[30],"emphasized":[31],"by":[32,121],"many":[33],"studies.":[34],"Analyzing":[35],"security":[37],"implications":[38],"keys\u2019":[41],"vulnerabilities,":[42],"several":[43],"studies":[44],"noted":[45],"public":[49,65,83,103,168],"key":[50,57,66,84,152],"reuse.":[51,145],"While":[52],"phenomenon":[54],"private":[56],"sharing":[58,67,153],"was":[59],"extensively":[60],"studied,":[61],"prevalence":[63],"remains":[71],"largely":[72],"unknown.":[73],"In":[74],"this":[75],"work,":[76],"we":[77],"perform":[78],"large-scale":[80],"analysis":[81],"reuse":[85],"within":[86],"PKI":[88],"ecosystem.":[89],"We":[90,127,179],"investigate":[91,139],"distribution":[95],"duplicate":[97,133],"X.509":[98],"certificates":[99,113,134,164],"reused":[101,136,171],"RSA":[102],"across":[105,172],"large":[107],"collection":[108],"containing":[109],"314":[111],"million":[112,117,163,167],"13":[116],"SSH":[118],"collected":[120],"different":[122,125],"sources":[123,143],"at":[124],"times.":[126],"analyze":[128],"weaknesses":[131],"reasons":[141],"Our":[146,158],"results":[147],"reveal":[148],"that":[149],"certificate":[150],"are":[154,170],"common":[155],"persistent.":[157],"findings":[159],"show":[160],"10":[162],"17":[166],"time":[173],"shared":[175],"between":[176],"our":[177],"collections.":[178],"observe":[180],"with":[182],"non-compliant":[183],"elements":[185],"stay":[186],"available":[187],"an":[189],"extended":[190],"period":[191],"time.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}