{"id":"https://openalex.org/W2980273018","doi":"https://doi.org/10.1145/3355048","title":"Differential Testing of Certificate Validation in SSL/TLS Implementations","display_name":"Differential Testing of Certificate Validation in SSL/TLS Implementations","publication_year":2019,"publication_date":"2019-10-09","ids":{"openalex":"https://openalex.org/W2980273018","doi":"https://doi.org/10.1145/3355048","mag":"2980273018"},"language":"en","primary_location":{"id":"doi:10.1145/3355048","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3355048","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003990194","display_name":"Cong Tian","orcid":"https://orcid.org/0000-0002-5429-4580"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cong Tian","raw_affiliation_strings":["ICTT and ISN Laboratory, Xidian University, Xi\u2019an, P.R. China","ICTT and ISN Laboratory, Xidian University, Xi'an, P.R. China"],"raw_orcid":"https://orcid.org/0000-0002-5429-4580","affiliations":[{"raw_affiliation_string":"ICTT and ISN Laboratory, Xidian University, Xi\u2019an, P.R. China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"ICTT and ISN Laboratory, Xidian University, Xi'an, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100741515","display_name":"Chu Chen","orcid":"https://orcid.org/0000-0002-5075-5722"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]},{"id":"https://openalex.org/I202126657","display_name":"Qufu Normal University","ror":"https://ror.org/03ceheh96","country_code":"CN","type":"education","lineage":["https://openalex.org/I202126657"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chu Chen","raw_affiliation_strings":["ICTT and ISN Laboratory, Xidian University, P.R. China and School of Information Science and Engineering, Qufu Normal University, Rizhao, Shandong, P.R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICTT and ISN Laboratory, Xidian University, P.R. China and School of Information Science and Engineering, Qufu Normal University, Rizhao, Shandong, P.R. China","institution_ids":["https://openalex.org/I202126657","https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071051896","display_name":"Zhenhua Duan","orcid":"https://orcid.org/0000-0002-3119-3242"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenhua Duan","raw_affiliation_strings":["ICTT and ISN Laboratory, Xidian University, Xi\u2019an, P.R. China","ICTT and ISN Laboratory, Xidian University, Xi'an, P.R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICTT and ISN Laboratory, Xidian University, Xi\u2019an, P.R. China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"ICTT and ISN Laboratory, Xidian University, Xi'an, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012329541","display_name":"Liang Zhao","orcid":"https://orcid.org/0000-0003-0678-489X"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liang Zhao","raw_affiliation_strings":["ICTT and ISN Laboratory, Xidian University, Xi\u2019an, P.R. China","ICTT and ISN Laboratory, Xidian University, Xi'an, P.R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICTT and ISN Laboratory, Xidian University, Xi\u2019an, P.R. China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"ICTT and ISN Laboratory, Xidian University, Xi'an, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.5528,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.93516043,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"28","issue":"4","first_page":"1","last_page":"37"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8556904792785645},{"id":"https://openalex.org/keywords/transport-layer-security","display_name":"Transport Layer Security","score":0.7852575778961182},{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.6805983781814575},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.6459271311759949},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.42519450187683105},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.35955673456192017},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2560983896255493},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2462211549282074},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.21287322044372559}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8556904792785645},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.7852575778961182},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.6805983781814575},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.6459271311759949},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.42519450187683105},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.35955673456192017},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2560983896255493},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2462211549282074},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.21287322044372559},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3355048","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3355048","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8185132731","display_name":null,"funder_award_id":"61732013, 61420106004, and 61751207","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":77,"referenced_works":["https://openalex.org/W133470593","https://openalex.org/W157156687","https://openalex.org/W1490038304","https://openalex.org/W1548806133","https://openalex.org/W1563577331","https://openalex.org/W1710734607","https://openalex.org/W1744779065","https://openalex.org/W1758578440","https://openalex.org/W1761495431","https://openalex.org/W1779735989","https://openalex.org/W1920390248","https://openalex.org/W1926951188","https://openalex.org/W1965194038","https://openalex.org/W1976919795","https://openalex.org/W1988524530","https://openalex.org/W1992114977","https://openalex.org/W2006599089","https://openalex.org/W2028722148","https://openalex.org/W2028820179","https://openalex.org/W2042033151","https://openalex.org/W2045676119","https://openalex.org/W2054426341","https://openalex.org/W2096449544","https://openalex.org/W2097305086","https://openalex.org/W2098456636","https://openalex.org/W2098681203","https://openalex.org/W2100180638","https://openalex.org/W2107709519","https://openalex.org/W2119251836","https://openalex.org/W2124279581","https://openalex.org/W2124621264","https://openalex.org/W2137530017","https://openalex.org/W2145994642","https://openalex.org/W2150656895","https://openalex.org/W2150990339","https://openalex.org/W2159933174","https://openalex.org/W2162120832","https://openalex.org/W2165004968","https://openalex.org/W2165413178","https://openalex.org/W2173013550","https://openalex.org/W2189482598","https://openalex.org/W2232962023","https://openalex.org/W2236904012","https://openalex.org/W2238866705","https://openalex.org/W2246483486","https://openalex.org/W2247093032","https://openalex.org/W2261520118","https://openalex.org/W2266218113","https://openalex.org/W2274779708","https://openalex.org/W2276785727","https://openalex.org/W2296886798","https://openalex.org/W2300496220","https://openalex.org/W2302114600","https://openalex.org/W2472975867","https://openalex.org/W2484116259","https://openalex.org/W2515197007","https://openalex.org/W2515650212","https://openalex.org/W2526826069","https://openalex.org/W2532335977","https://openalex.org/W2650293344","https://openalex.org/W2672575173","https://openalex.org/W2701082322","https://openalex.org/W2765827436","https://openalex.org/W2906397449","https://openalex.org/W2915352631","https://openalex.org/W3160978791","https://openalex.org/W4210531213","https://openalex.org/W4211072556","https://openalex.org/W4213190682","https://openalex.org/W4214542310","https://openalex.org/W4234639966","https://openalex.org/W4239249613","https://openalex.org/W4246263814","https://openalex.org/W4249529812","https://openalex.org/W4298051233","https://openalex.org/W4300420355","https://openalex.org/W6906355099"],"related_works":["https://openalex.org/W2120447654","https://openalex.org/W2977179488","https://openalex.org/W2144453115","https://openalex.org/W2128223750","https://openalex.org/W4238532390","https://openalex.org/W2188872161","https://openalex.org/W2002978035","https://openalex.org/W2961779879","https://openalex.org/W797688974","https://openalex.org/W1847785363"],"abstract_inverted_index":{"Certificate":[0],"validation":[1,25],"in":[2,26,90,172,194],"Secure":[3],"Sockets":[4],"Layer":[5,8],"or":[6,99],"Transport":[7],"Security":[9],"protocol":[10],"(SSL/TLS)":[11],"is":[12,19,29,43,142,170,198],"critical":[13],"to":[14,21,95,120,144],"Internet":[15],"security.":[16],"Thus,":[17],"it":[18],"significant":[20],"check":[22],"whether":[23],"certificate":[24,88],"SSL/TLS":[27,91,176],"implementations":[28,92],"correctly":[30],"implemented.":[31],"With":[32],"this":[33],"motivation,":[34],"we":[35],"propose":[36],"a":[37],"novel":[38],"differential":[39,138,149],"testing":[40,139,146,150],"approach":[41,102,169],"that":[42,147,167],"based":[44],"on":[45],"the":[46,82,106,127,134,155,168,189],"standard":[47],"Request":[48],"for":[49,184],"Comments":[50],"(RFC).":[51],"First,":[52],"rules":[53],"of":[54,111,123,136,158,175,191],"certificates":[55,84,110,183],"are":[56,65,77,93,113,117],"extracted":[57],"automatically":[58],"from":[59],"RFCs.":[60],"Second,":[61],"low-level":[62],"test":[63,73,86],"cases":[64],"generated":[66],"through":[67],"dynamic":[68],"symbolic":[69],"execution.":[70],"Third,":[71],"high-level":[72],"cases,":[74,87],"i.e.,":[75],"certificates,":[76,129],"assembled":[78,83,118],"automatically.":[79],"Finally,":[80],"with":[81,126,187],"being":[85],"validations":[89],"tested":[94],"reveal":[96],"latent":[97],"vulnerabilities":[98],"bugs.":[100],"Our":[101],"named":[103],"RFCcert":[104,112,130,159],"has":[105,160],"following":[107],"advantages:":[108],"(1)":[109],"discrepancy-targeted,":[114],"since":[115],"they":[116],"according":[119],"standards":[121],"instead":[122],"genetics;":[124],"(2)":[125],"obtained":[128],"not":[131],"only":[132],"reveals":[133],"invalidity":[135],"traditional":[137,148],"but":[140],"also":[141],"able":[143],"conduct":[145],"cannot":[151],"do;":[152],"and":[153,163],"(3)":[154],"supporting":[156],"tool":[157],"been":[161],"implemented":[162],"extensive":[164],"experiments":[165],"show":[166],"effective":[171],"finding":[173,195],"bugs":[174],"implementations.":[177],"In":[178],"addition,":[179],"by":[180],"providing":[181],"seed":[182],"mutation":[185,192],"approaches":[186,193],"RFCcert,":[188],"ability":[190],"distinct":[196],"discrepancies":[197],"significantly":[199],"enhanced.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}