{"id":"https://openalex.org/W2731865152","doi":"https://doi.org/10.1145/3102304.3102331","title":"Malicious SSL Certificate Detection","display_name":"Malicious SSL Certificate Detection","publication_year":2017,"publication_date":"2017-07-19","ids":{"openalex":"https://openalex.org/W2731865152","doi":"https://doi.org/10.1145/3102304.3102331","mag":"2731865152"},"language":"en","primary_location":{"id":"doi:10.1145/3102304.3102331","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3102304.3102331","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the International Conference on Future Networks and Distributed Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://e-space.mmu.ac.uk/620071/1/a27-Ghafir.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055981395","display_name":"Ibrahim Ghafir","orcid":"https://orcid.org/0000-0003-3702-3866"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Ibrahim Ghafir","raw_affiliation_strings":["Faculty of Informatics, Masaryk University, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Informatics, Masaryk University, Brno, Czech Republic","institution_ids":["https://openalex.org/I21449261"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027360900","display_name":"V\u00e1clav P\u0159enosil","orcid":"https://orcid.org/0000-0002-3867-9990"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Vaclav Prenosil","raw_affiliation_strings":["Faculty of Informatics, Masaryk University, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Informatics, Masaryk University, Brno, Czech Republic","institution_ids":["https://openalex.org/I21449261"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089637331","display_name":"Mohammad Hammoudeh","orcid":"https://orcid.org/0000-0003-1058-0996"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohammad Hammoudeh","raw_affiliation_strings":["Faculty of Science & Engineering, Manchester Metropolitan University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Science & Engineering, Manchester Metropolitan University, UK","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023625466","display_name":"Liangxiu Han","orcid":"https://orcid.org/0000-0003-2491-7473"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Liangxiu Han","raw_affiliation_strings":["Faculty of Science & Engineering, Manchester Metropolitan University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Science & Engineering, Manchester Metropolitan University, UK","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039128929","display_name":"Umar Raza","orcid":"https://orcid.org/0000-0002-9810-1285"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Umar Raza","raw_affiliation_strings":["Faculty of Science & Engineering, Manchester Metropolitan University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Science & Engineering, Manchester Metropolitan University, UK","institution_ids":["https://openalex.org/I11983389"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.9225,"has_fulltext":true,"cited_by_count":30,"citation_normalized_percentile":{"value":0.92390041,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/blacklist","display_name":"Blacklist","score":0.9418379664421082},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7556090354919434},{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.6329426765441895},{"id":"https://openalex.org/keywords/transport-layer-security","display_name":"Transport Layer Security","score":0.6329267024993896},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6231963634490967},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5818238258361816},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5613397359848022},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5170793533325195},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.48678919672966003},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.4347511827945709}],"concepts":[{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.9418379664421082},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7556090354919434},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.6329426765441895},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.6329267024993896},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6231963634490967},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5818238258361816},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5613397359848022},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5170793533325195},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.48678919672966003},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.4347511827945709},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3102304.3102331","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3102304.3102331","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the International Conference on Future Networks and Distributed Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:e-space.mmu.ac.uk:620071","is_oa":true,"landing_page_url":"https://e-space.mmu.ac.uk/view/authors/2d8e23d4511218f373fdb901df1fd553.html>,","pdf_url":"https://e-space.mmu.ac.uk/620071/1/a27-Ghafir.pdf","source":{"id":"https://openalex.org/S4306401617","display_name":"e-space (Manchester Metropolitan University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11983389","host_organization_name":"Manchester Metropolitan University","host_organization_lineage":["https://openalex.org/I11983389"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference or Workshop Item"}],"best_oa_location":{"id":"pmh:oai:e-space.mmu.ac.uk:620071","is_oa":true,"landing_page_url":"https://e-space.mmu.ac.uk/view/authors/2d8e23d4511218f373fdb901df1fd553.html>,","pdf_url":"https://e-space.mmu.ac.uk/620071/1/a27-Ghafir.pdf","source":{"id":"https://openalex.org/S4306401617","display_name":"e-space (Manchester Metropolitan University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11983389","host_organization_name":"Manchester Metropolitan University","host_organization_lineage":["https://openalex.org/I11983389"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference or Workshop Item"},"sustainable_development_goals":[{"display_name":"Responsible consumption and production","id":"https://metadata.un.org/sdg/12","score":0.5699999928474426}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2731865152.pdf","grobid_xml":"https://content.openalex.org/works/W2731865152.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W59369888","https://openalex.org/W1510508184","https://openalex.org/W1516506771","https://openalex.org/W1642882198","https://openalex.org/W1649901946","https://openalex.org/W1914835564","https://openalex.org/W1969419498","https://openalex.org/W1976413307","https://openalex.org/W1991906836","https://openalex.org/W1996185014","https://openalex.org/W2012885235","https://openalex.org/W2042952667","https://openalex.org/W2063544705","https://openalex.org/W2080757788","https://openalex.org/W2081357650","https://openalex.org/W2092101319","https://openalex.org/W2143949933","https://openalex.org/W2155011304","https://openalex.org/W2164348526","https://openalex.org/W2180696299","https://openalex.org/W2182819203","https://openalex.org/W2185537293","https://openalex.org/W2217956940","https://openalex.org/W2220117874","https://openalex.org/W2258636546","https://openalex.org/W2261803129","https://openalex.org/W2286303343","https://openalex.org/W2288747313","https://openalex.org/W2290880970","https://openalex.org/W2314121694","https://openalex.org/W2486441280","https://openalex.org/W2493656807","https://openalex.org/W2501070846","https://openalex.org/W2501259350","https://openalex.org/W2502715931","https://openalex.org/W2526787500","https://openalex.org/W2532424365","https://openalex.org/W2545820541","https://openalex.org/W2560932476","https://openalex.org/W2563709429","https://openalex.org/W2584481700","https://openalex.org/W2590816369","https://openalex.org/W2596503800","https://openalex.org/W2809662192","https://openalex.org/W3121480663","https://openalex.org/W3149990268","https://openalex.org/W4232658927"],"related_works":["https://openalex.org/W2181543702","https://openalex.org/W3172840274","https://openalex.org/W2769847412","https://openalex.org/W2146351192","https://openalex.org/W3037489623","https://openalex.org/W2991976289","https://openalex.org/W4241417517","https://openalex.org/W4379624358","https://openalex.org/W2017968904","https://openalex.org/W2005813008"],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threat":[2],"(APT)":[3],"is":[4,15,41,72,132,147],"one":[5],"of":[6,11,22,96,103,106,143,166],"the":[7,26,47,67,88,109,113,129,151,161],"most":[8],"serious":[9],"types":[10],"cyber":[12],"attacks,":[13],"which":[14,84],"a":[16,77,94],"new":[17],"and":[18,35,37,45,112,122,134,160],"more":[19],"complex":[20],"version":[21],"multistep":[23],"attack.":[24],"Within":[25],"APT":[27,89],"life":[28],"cycle,":[29],"continuous":[30],"communication":[31],"between":[32],"infected":[33],"hosts":[34],"Command":[36],"Control":[38],"(C&C)":[39],"servers":[40],"maintained":[42],"to":[43,64,70],"instruct":[44],"guide":[46],"compromised":[48],"machines.":[49],"These":[50],"communications":[51,91],"are":[52,118,138],"usually":[53],"protected":[54],"by":[55],"Secure":[56],"Sockets":[57],"Layer":[58],"(SSL)":[59],"encryption,":[60],"making":[61],"it":[62],"difficult":[63],"identify":[65],"if":[66],"traffic":[68,131],"directed":[69],"sites":[71],"malicious.":[73],"This":[74,100,155],"paper":[75],"presents":[76],"Malicious":[78],"SSL":[79,98,107,141,152,168],"certificate":[80,142,153],"Detection":[81],"(MSSLD)":[82],"module,":[83,128],"aims":[85],"at":[86],"detecting":[87],"C&C":[90],"based":[92],"on":[93],"blacklist":[95,101],"malicious":[97,123,167],"certificates.":[99,169],"consists":[102],"two":[104],"forms":[105],"certificates,":[108],"SHA1":[110],"fingerprints":[111],"serial":[114],"&":[115],"subject,":[116],"that":[117],"associated":[119],"with":[120,150],"malware":[121],"activities.":[124],"In":[125],"this":[126],"detection":[127,165],"network":[130],"processed":[133],"all":[135],"secure":[136,145],"connections":[137],"filtered.":[139],"The":[140],"each":[144],"connection":[146],"then":[148],"matched":[149],"blacklist.":[154],"module":[156],"was":[157],"experimentally":[158],"evaluated":[159],"results":[162],"show":[163],"successful":[164]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":7}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}