{"id":"https://openalex.org/W4304944577","doi":"https://doi.org/10.1145/3567595","title":"Pareto-optimal Defenses for the Web Infrastructure: Theory and Practice","display_name":"Pareto-optimal Defenses for the Web Infrastructure: Theory and Practice","publication_year":2022,"publication_date":"2022-10-13","ids":{"openalex":"https://openalex.org/W4304944577","doi":"https://doi.org/10.1145/3567595"},"language":"en","primary_location":{"id":"doi:10.1145/3567595","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3567595","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3567595","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3567595","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091123033","display_name":"Giorgio Di Tizio","orcid":"https://orcid.org/0000-0002-8713-8197"},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giorgio Di Tizio","raw_affiliation_strings":["University of Trento, Trento, Italy"],"raw_orcid":"https://orcid.org/0000-0002-8713-8197","affiliations":[{"raw_affiliation_string":"University of Trento, Trento, Italy","institution_ids":["https://openalex.org/I193223587"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006785077","display_name":"Patrick Speicher","orcid":"https://orcid.org/0000-0003-1022-2179"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Patrick Speicher","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0003-1022-2179","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068686265","display_name":"Milivoj Simeonovski","orcid":"https://orcid.org/0000-0001-8389-633X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Milivoj Simeonovski","raw_affiliation_strings":["Independent researcher"],"raw_orcid":"https://orcid.org/0000-0001-8389-633X","affiliations":[{"raw_affiliation_string":"Independent researcher","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102730269","display_name":"Michael Backes","orcid":"https://orcid.org/0000-0002-7130-9211"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael Backes","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-7130-9211","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087823285","display_name":"Ben Stock","orcid":"https://orcid.org/0000-0001-9659-0700"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ben Stock","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0001-9659-0700","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071250407","display_name":"Robert K\u00fcnnemann","orcid":"https://orcid.org/0000-0003-0822-9283"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Robert K\u00fcnnemann","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0822-9283","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Stuhlsatzenhaus, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9292,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.80515262,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"26","issue":"2","first_page":"1","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7455748319625854},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5663872361183167},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.5318353176116943},{"id":"https://openalex.org/keywords/ipsec","display_name":"IPsec","score":0.4894977807998657},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.4707271158695221},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.4116542637348175},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3336775004863739},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2962501049041748},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2510077953338623},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.15580210089683533}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7455748319625854},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5663872361183167},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.5318353176116943},{"id":"https://openalex.org/C67396069","wikidata":"https://www.wikidata.org/wiki/Q210214","display_name":"IPsec","level":3,"score":0.4894977807998657},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.4707271158695221},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.4116542637348175},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3336775004863739},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2962501049041748},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2510077953338623},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.15580210089683533}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3567595","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3567595","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3567595","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},{"id":"pmh:oai:iris.unitn.it:11572/370369","is_oa":true,"landing_page_url":"https://dl.acm.org/doi/10.1145/3567595","pdf_url":"https://iris.unitn.it/bitstream/11572/370369/1/TOPS_preprint.pdf","source":{"id":"https://openalex.org/S4306401913","display_name":"Institutional Research Information System (Universit\u00e0 degli Studi di Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1145/3567595","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3567595","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3567595","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6200000047683716}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4304944577.pdf","grobid_xml":"https://content.openalex.org/works/W4304944577.grobid-xml"},"referenced_works_count":58,"referenced_works":["https://openalex.org/W200873936","https://openalex.org/W1927311981","https://openalex.org/W1973926261","https://openalex.org/W1974977720","https://openalex.org/W1982282238","https://openalex.org/W1988292309","https://openalex.org/W2042923641","https://openalex.org/W2054127354","https://openalex.org/W2065283652","https://openalex.org/W2082666187","https://openalex.org/W2083658929","https://openalex.org/W2083793737","https://openalex.org/W2092233407","https://openalex.org/W2103117727","https://openalex.org/W2110444284","https://openalex.org/W2110908300","https://openalex.org/W2137204060","https://openalex.org/W2164059558","https://openalex.org/W2186028149","https://openalex.org/W2230402893","https://openalex.org/W2242951943","https://openalex.org/W2300554752","https://openalex.org/W2302463347","https://openalex.org/W2510134782","https://openalex.org/W2524790524","https://openalex.org/W2535549398","https://openalex.org/W2559873242","https://openalex.org/W2604746202","https://openalex.org/W2618771940","https://openalex.org/W2766954398","https://openalex.org/W2789221435","https://openalex.org/W2890228473","https://openalex.org/W2897385569","https://openalex.org/W2901089484","https://openalex.org/W2904027722","https://openalex.org/W2962940036","https://openalex.org/W3002929229","https://openalex.org/W3003683799","https://openalex.org/W3037734777","https://openalex.org/W3093736937","https://openalex.org/W3100328669","https://openalex.org/W3117384287","https://openalex.org/W3170106073","https://openalex.org/W3188982559","https://openalex.org/W3190536237","https://openalex.org/W3191067032","https://openalex.org/W4232271737","https://openalex.org/W4233819588","https://openalex.org/W4236989406","https://openalex.org/W4248986893","https://openalex.org/W4249844516","https://openalex.org/W4253730333","https://openalex.org/W6637047716","https://openalex.org/W6640229219","https://openalex.org/W6697978539","https://openalex.org/W6703759646","https://openalex.org/W6812742317","https://openalex.org/W6814336774"],"related_works":["https://openalex.org/W2071995472","https://openalex.org/W2548409577","https://openalex.org/W2407701912","https://openalex.org/W3180404666","https://openalex.org/W1531015913","https://openalex.org/W1484631816","https://openalex.org/W2167752994","https://openalex.org/W2907218437","https://openalex.org/W2117221897","https://openalex.org/W2181766705"],"abstract_inverted_index":{"The":[0],"integrity":[1],"of":[2,18,24,48,55,102,108,126,150,164,166,181,214,233],"the":[3,12,34,39,46,53,56,64,77,81,105,109,124,162,179,182,190,231,236],"content":[4,61],"a":[5,16,134,143,148,203,211,225],"user":[6],"is":[7,222],"exposed":[8],"to":[9,73,80,154,175,207,217,230],"when":[10],"browsing":[11],"web":[13,220],"relies":[14],"on":[15,52,89,94,138],"plethora":[17],"non-web":[19],"technologies":[20],"and":[21,29,63,92,120,147,156,197,238,249],"an":[22,100],"infrastructure":[23,180,200,244],"interdependent":[25],"hosts,":[26],"communication":[27],"technologies,":[28],"trust":[30],"relations.":[31],"Incidents":[32],"like":[33],"Chinese":[35],"Great":[36],"Cannon":[37],"or":[38],"MyEtherWallet":[40],"attack":[41],"make":[42],"it":[43],"painfully":[44],"clear:":[45],"security":[47,54,127,163,191,215],"end":[49],"users":[50,167],"hinges":[51],"surrounding":[57],"infrastructure:":[58],"routing,":[59],"DNS,":[60],"delivery,":[62],"PKI.":[65],"There":[66],"are":[67,195],"many":[68],"competing,":[69],"but":[70],"isolated":[71],"proposals":[72,112,151],"increase":[74,125,213],"security,":[75],"from":[76,152,171],"network":[78],"up":[79],"application":[82,237],"layer.":[83],"So":[84],"far,":[85],"researchers":[86],"have":[87,202],"focused":[88],"analyzing":[90],"attacks":[91],"defenses":[93],"specific":[95],"layers.":[96],"We":[97,209],"still":[98],"lack":[99],"evaluation":[101],"how,":[103],"given":[104],"status":[106],"quo":[107],"web,":[110],"these":[111],"can":[113],"be":[114],"combined,":[115],"how":[116],"effective":[117],"they":[118],"are,":[119],"at":[121,224,235],"what":[122],"cost":[123],"comes.":[128],"In":[129],"this":[130],"work,":[131],"we":[132,187],"propose":[133],"graph-based":[135],"analysis":[136],"based":[137],"Stackelberg":[139],"planning":[140],"that":[141,189,198],"considers":[142,161],"rich":[144],"attacker":[145],"model":[146,160],"multitude":[149],"IPsec":[153],"DNSSEC":[155,248],"SRI.":[157],"Our":[158],"threat":[159,205],"billions":[165],"against":[168],"attackers":[169],"ranging":[170],"small":[172],"hacker":[173],"groups":[174],"nation-state":[176],"actors.":[177],"Analyzing":[178],"Top":[183],"5k":[184],"Alexa":[185],"domains,":[186],"discover":[188],"mechanisms":[192],"currently":[193],"deployed":[194],"ineffective":[196],"some":[199],"providers":[201],"comparable":[204],"potential":[206],"nations.":[208],"find":[210],"considerable":[212],"(up":[216],"13%":[218],"protected":[219],"visits)":[221],"possible":[223],"relatively":[226],"modest":[227],"cost,":[228],"due":[229],"effectiveness":[232],"mitigations":[234],"transport":[239],"layer,":[240],"which":[241],"dominate":[242],"expensive":[243],"enhancements":[245],"such":[246],"as":[247],"IPsec.":[250]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}