{"id":"https://openalex.org/W2788566041","doi":"https://doi.org/10.1145/3176244","title":"Analysis of SSL certificate reissues and revocations in the wake of heartbleed","display_name":"Analysis of SSL certificate reissues and revocations in the wake of heartbleed","publication_year":2018,"publication_date":"2018-02-21","ids":{"openalex":"https://openalex.org/W2788566041","doi":"https://doi.org/10.1145/3176244","mag":"2788566041"},"language":"en","primary_location":{"id":"doi:10.1145/3176244","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3176244","pdf_url":null,"source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100425229","display_name":"Liang Zhang","orcid":"https://orcid.org/0000-0002-5997-4868"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Liang Zhang","raw_affiliation_strings":["Northeastern University, Boston, MA"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073676654","display_name":"David Choffnes","orcid":"https://orcid.org/0000-0001-7825-7226"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Choffnes","raw_affiliation_strings":["Northeastern University, Boston, MA"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033409139","display_name":"Tudor Dumitra\u015f","orcid":"https://orcid.org/0000-0003-4350-7226"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tudor Dumitra\u015f","raw_affiliation_strings":["University of Maryland, College Park, MD"],"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park, MD","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088579822","display_name":"Dave Levin","orcid":"https://orcid.org/0000-0003-4957-5131"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dave Levin","raw_affiliation_strings":["University of Maryland, College Park, MD"],"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park, MD","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083710366","display_name":"Alan Mislove","orcid":"https://orcid.org/0000-0002-4824-9302"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alan Mislove","raw_affiliation_strings":["Northeastern University, Boston, MA"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054807714","display_name":"Aaron Schulman","orcid":"https://orcid.org/0000-0002-9280-8925"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aaron Schulman","raw_affiliation_strings":["Stanford University, Stanford, CA"],"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072703507","display_name":"Christo Wilson","orcid":"https://orcid.org/0000-0002-5268-004X"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christo Wilson","raw_affiliation_strings":["Northeastern University, Boston, MA"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA","institution_ids":["https://openalex.org/I12912129"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5100425229"],"corresponding_institution_ids":["https://openalex.org/I12912129"],"apc_list":null,"apc_paid":null,"fwci":1.2917,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.8173104,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"61","issue":"3","first_page":"109","last_page":"116"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.7652842998504639},{"id":"https://openalex.org/keywords/public-key-infrastructure","display_name":"Public key infrastructure","score":0.7323212027549744},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6781202554702759},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5392772555351257},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.49405744671821594},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4609456956386566},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.42696988582611084},{"id":"https://openalex.org/keywords/revocation-list","display_name":"Revocation list","score":0.418312132358551},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.41547590494155884},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.38074636459350586},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.37016892433166504},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2213204801082611},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.07220998406410217}],"concepts":[{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.7652842998504639},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.7323212027549744},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6781202554702759},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5392772555351257},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.49405744671821594},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4609456956386566},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.42696988582611084},{"id":"https://openalex.org/C147296133","wikidata":"https://www.wikidata.org/wiki/Q196765","display_name":"Revocation list","level":5,"score":0.418312132358551},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.41547590494155884},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.38074636459350586},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.37016892433166504},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2213204801082611},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.07220998406410217},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3176244","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3176244","pdf_url":null,"source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G7120374491","display_name":null,"funder_award_id":"CNS-1054233, CNS- 1319019, CNS-1150177","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1490011260","https://openalex.org/W2019016802","https://openalex.org/W2056494114","https://openalex.org/W2077667328","https://openalex.org/W2104899073","https://openalex.org/W2112736324","https://openalex.org/W2130867912","https://openalex.org/W2273409753","https://openalex.org/W2296570230","https://openalex.org/W2550748725"],"related_works":["https://openalex.org/W1494030766","https://openalex.org/W2170764533","https://openalex.org/W1506124145","https://openalex.org/W1612032142","https://openalex.org/W1915479549","https://openalex.org/W151108224","https://openalex.org/W2948255760","https://openalex.org/W2740760952","https://openalex.org/W4313128548","https://openalex.org/W2001371286"],"abstract_inverted_index":{"A":[0],"properly":[1,67],"managed":[2],"public":[3],"key":[4],"infrastructure":[5],"(PKI)":[6],"is":[7,40],"critical":[8],"to":[9,42,62,100],"ensure":[10],"secure":[11],"communication":[12],"on":[13,135,155],"the":[14,19,98,104,136,141,152],"Internet.":[15],"Surprisingly,":[16],"some":[17],"of":[18,108],"most":[20],"important":[21,148],"administrative":[22],"steps---in":[23],"particular,":[24],"reissuing":[25],"new":[26,89],"X.509":[27],"certificates":[28,110],"and":[29,34,87,114],"revoking":[30],"old":[31,83],"ones---are":[32],"manual":[33,45,153],"remained":[35],"unstudied,":[36],"largely":[37],"because":[38],"it":[39],"difficult":[41],"measure":[43],"these":[44],"processes":[46,154],"at":[47],"scale.":[48],"We":[49,96],"use":[50],"Heartbleed,":[51],"a":[52,59,130],"widespread":[53],"OpenSSL":[54],"vulnerability":[55],"from":[56,103],"2014,":[57],"as":[58,92,94],"natural":[60],"experiment":[61],"determine":[63],"whether":[64],"administrators":[65],"are":[66,146],"managing":[68],"their":[69,79,82],"certificates.":[70],"All":[71],"domains":[72],"affected":[73],"by":[74],"Heartbleed":[75,123,142],"should":[76],"have":[77],"patched":[78],"software,":[80],"revoked":[81,119],"(possibly":[84],"compromised)":[85],"certificates,":[86],"reissued":[88,113],"ones,":[90],"all":[91],"quickly":[93],"possible.":[95],"find":[97],"reality":[99],"be":[101],"far":[102],"ideal:":[105],"over":[106,115],"73%":[107],"vulnerable":[109],"were":[111,117],"not":[112,118],"87%":[116],"three":[120],"weeks":[121],"after":[122],"was":[124],"disclosed.":[125],"Our":[126],"results":[127,145],"also":[128],"show":[129],"drastic":[131],"decline":[132],"in":[133,150],"revocations":[134],"weekends,":[137],"even":[138],"immediately":[139],"following":[140],"announcement.":[143],"These":[144],"an":[147],"step":[149],"understanding":[151],"which":[156],"users":[157],"rely":[158],"for":[159],"secure,":[160],"authenticated":[161],"communication.":[162]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}