{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T12:17:54Z","timestamp":1763468274134,"version":"build-2065373602"},"reference-count":39,"publisher":"MDPI AG","issue":"6","license":[{"start":{"date-parts":[[2015,6,8]],"date-time":"2015-06-08T00:00:00Z","timestamp":1433721600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>Transport Layer Security (TLS) and its predecessor, SSL, are important cryptographic protocol suites on the Internet. They both implement public key certificates and rely on a group of trusted certificate authorities (i.e., CAs) for peer authentication. Unfortunately, the most recent research reveals that, if any one of the pre-trusted CAs is compromised, fake certificates can be issued to intercept the corresponding SSL\/TLS connections. This security vulnerability leads to catastrophic impacts on SSL\/TLS-based HTTPS, which is the underlying protocol to provide secure web services for e-commerce, e-mails, etc. To address this problem, we design an attribute dependency-based detection mechanism, called SSLight. SSLight can expose fake certificates by checking whether the certificates contain some attribute dependencies rarely occurring in legitimate samples. We conduct extensive experiments to evaluate SSLight and successfully confirm that SSLight can detect the vast majority of fake certificates issued from any trusted CAs if they are compromised. As a real-world example, we also implement SSLight as a Firefox add-on and examine its capability of exposing existent fake certificates from DigiNotar and Comodo, both of which have made a giant impact around the world.<\/jats:p>","DOI":"10.3390\/e17063806","type":"journal-article","created":{"date-parts":[[2015,6,10]],"date-time":"2015-06-10T14:05:45Z","timestamp":1433945145000},"page":"3806-3837","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["On the Detection of Fake Certificates via Attribute Correlation"],"prefix":"10.3390","volume":"17","author":[{"given":"Xiaojing","family":"Gu","sequence":"first","affiliation":[{"name":"Key Laboratory of Advanced Control and Optimization for Chemical Process, Ministry of Education,East China University of Science and Technology, 200237 Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xingsheng","family":"Gu","sequence":"additional","affiliation":[{"name":"Key Laboratory of Advanced Control and Optimization for Chemical Process, Ministry of Education,East China University of Science and Technology, 200237 Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2015,6,8]]},"reference":[{"key":"ref_1","first-page":"471","article-title":"Public key infrastructure overview","volume":"19","author":"Vatra","year":"2009","journal-title":"Sci. Stud. Res. Ser. Math. Inform."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Solo, D., Housley, R., and Ford, W. (2002). Internet X. 509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, The Internet Society.","DOI":"10.17487\/rfc3280"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Dierks, T. (2008). The Transport Layer Security (TLS) Protocol Version 1.2, The Internet Society.","DOI":"10.17487\/rfc5246"},{"key":"ref_4","unstructured":"Soghoian, C., and Stamm, S. (2012). Financial Cryptography and Data Security, Springer."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1109\/MSP.2009.12","article-title":"Man-in-the-middle attack to the HTTPS protocol","volume":"7","author":"Callegati","year":"2009","journal-title":"IEEE Secur. Priv."},{"key":"ref_6","unstructured":"Foundation, E.F. The EFF SSL Observatory. Available online: http:\/\/www.eff.org\/observatory."},{"key":"ref_7","unstructured":"Foundation, E.F. The EFF Color Map of CAs. Available online: http:\/\/www.eff.org\/files\/colour_map_of_CAs.pdf."},{"key":"ref_8","unstructured":"Advisory, M.S. Fraudulent Digital Certificates Could Allow Spoofing. Available online: http:\/\/technet.microsoft.com\/en-us\/security\/advisory\/2607712."},{"key":"ref_9","unstructured":"Nightingale, J. Diginotar Removal Follow Up. Available online: http:\/\/blog.mozilla.com\/security\/2011\/09\/02\/diginotar-removal-follow-up\/."},{"key":"ref_10","unstructured":"Fisher, D. New Versions of Chrome and Firefox Disable Diginotar Root. Available online: https:\/\/threatpost.com\/new-versions-chrome-and-firefox-disable-diginotar-root-083111\/75600."},{"key":"ref_11","unstructured":"M. S. Blog Comodo certificate issue follow up. Available online: https:\/\/blog.mozilla.com\/security\/2011\/03\/25\/comodo-certificate-issue-follow-up\/."},{"key":"ref_12","unstructured":"Wendlandt, D., Andersen, D.G., and Perrig, A. (2008, January 22\u201327). Perspectives: Improving SSH-style host authentication with multi-path probing. Boston, MA, USA."},{"key":"ref_13","unstructured":"Tor Project HTTPS Everywhere. Available online: https:\/\/trac.torproject.org\/projects\/tor\/wiki\/doc\/HTTPSEverywhere\/SSLObservatorySubmission(accessed."},{"key":"ref_14","unstructured":"Laurie, B. Improving SSL Certificate Security. Available online: http:\/\/googleonlinesecurity.blogspot.com\/2011\/04\/improving-ssl-certificate-security.html."},{"key":"ref_15","unstructured":"Foundation, E.F. The Sovereign Keys Project. Available online: https:\/\/www.eff.org\/zh-hans\/sovereign-keys."},{"key":"ref_16","unstructured":"International Telecommunication Union Information Technology ASN.1 Encoding Rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER). Available online: http:\/\/www.itu.int\/ITU-T\/studygroups\/com17\/languages\/X.690-0207.pdf."},{"key":"ref_17","unstructured":"International Telecommunication Union Information Technology Open Systems Interconnection the Directory: Selected Attribute Types. Available online: http:\/\/www.itu.int\/rec\/T-REC-X.520-200811-I\/en."},{"key":"ref_18","unstructured":"Nystrom, M., and Kaliski, B. Certification Request Syntax Specification Version 1.7. Available online: http:\/\/tools.ietf.org\/html\/rfc2986."},{"key":"ref_19","unstructured":"Nightingale, J. Fraudulent *.google.com Certificate. Available online: http:\/\/blog.mozilla.com\/security\/2011\/08\/29\/fraudulent-google-com-certificate\/."},{"key":"ref_20","unstructured":"Nightingale, J. Diginotar Removal Follow up. Available online: http:\/\/blog.mozilla.com\/security\/2011\/09\/02\/diginotar-removal-follow-up\/."},{"key":"ref_21","unstructured":"Boneh, D. SSL Man in the Middle Proxy. Available online: http:\/\/crypto.stanford.edu\/ssl-mitm\/."},{"key":"ref_22","unstructured":"Foundation, E.F. Observatory Certificate Database. Available online: http:\/\/www.eff.org\/files\/observatory-dec-2010.sql.lzma.torrent."},{"key":"ref_23","unstructured":"SSL MITM Attack by Iranian Government. Available online: http:\/\/pastebin.com\/ff7Yg663."},{"key":"ref_24","unstructured":"Comodo fraud incident. Available online: https:\/\/www.comodo.com\/Comodo-Fraud-Incident-2011-03-23.html."},{"key":"ref_25","unstructured":"Durumeric, Z., Wustrow, E., and Halderman, J.A. (2013, January 14\u201316). ZMap: Fast Internet-wide scanning and its security applications. Washington, DC, USA."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"562","DOI":"10.1109\/SURV.2011.092110.00088","article-title":"A survey on trust management for mobile ad hoc networks","volume":"13","author":"Cho","year":"2011","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"613","DOI":"10.1109\/TIFS.2015.2389145","article-title":"Toward energy-efficient trust system through watchdog optimization for WSNs","volume":"10","author":"Zhou","year":"2015","journal-title":"IEEE Trans. Inf. Forens. Secur."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"409","DOI":"10.1109\/TSMC.2013.2263128","article-title":"A Trust-aware system for personalized user recommendations in social networks","volume":"44","author":"Eirinaki","year":"2014","journal-title":"IEEE Trans. Syst. Man Cybern."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"119","DOI":"10.1007\/s10458-005-6825-4","article-title":"An integrated trust and reputation model for open multi-agent systems","volume":"13","author":"Huynh","year":"2006","journal-title":"Autono. Agents Multi-Agent Syst."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"3522","DOI":"10.1016\/j.comnet.2013.08.005","article-title":"SGor: Trust graph based onion routing","volume":"57","author":"Zhou","year":"2013","journal-title":"Comput. Netw."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1016\/j.cose.2013.09.007","article-title":"Inference attacks against trust-based onion routing: Trust degree to the rescue","volume":"39","author":"Zhou","year":"2013","journal-title":"Comput. Secur."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Lee, H.K., Malkin, T., and Nahum, E. (2007, January 24\u201326). Cryptographic strength of SSL\/TLS servers: Current and recent practices. San Diego, CA, USA.","DOI":"10.1145\/1298306.1298318"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Yilek, S., Rescorla, E., Shacham, H., Enright, B., and Savage, S. (2009, January 4\u20136). When private keys are public: Results from the 2008 Debian OpenSSL vulnerability. Chicago, IL, USA.","DOI":"10.1145\/1644893.1644896"},{"key":"ref_34","unstructured":"Ristic, I. Internet SSL survey. Available online: http:\/\/media.blackhat.com\/bh-us-10\/presentations\/Ristic\/BlackHat-USA-2010-Ristic-Qualys-SSL-Survey-HTTP-Rating-Guide-slides.pdf."},{"key":"ref_35","unstructured":"Eckersley, P., and Burns, J. Is the SSLiverse a Safe Place?. Available online: http:\/\/www.eff.org\/files\/ccc2010.pdf."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Holz, R., Braun, L., Kammenhuber, N., and Carle, G. (2011, January 2\u20134). The SSL landscape: A thorough analysis of the X.509 PKI using active and passive measurements. Berlin, Germany.","DOI":"10.1145\/2068816.2068856"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Fung, A.P., and Cheung, K. (2010, January 13\u201316). SSLock: Sustaining the trust on entities brought by SSL. Beijing, China.","DOI":"10.1145\/1755688.1755714"},{"key":"ref_38","unstructured":"Adelsbach, A., Gajek, S., and Schwenk, J. (2005). Information Security Practice and Experience, Springer."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Xia, H., and Brustoloni, J.C. (2005, January 10\u201314). Hardening web browsers against man-in-the-middle and eavesdropping attacks. Chiba, Japan.","DOI":"10.1145\/1060745.1060817"}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/17\/6\/3806\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T20:47:36Z","timestamp":1760215656000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/17\/6\/3806"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,6,8]]},"references-count":39,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2015,6]]}},"alternative-id":["e17063806"],"URL":"https:\/\/doi.org\/10.3390\/e17063806","relation":{},"ISSN":["1099-4300"],"issn-type":[{"type":"electronic","value":"1099-4300"}],"subject":[],"published":{"date-parts":[[2015,6,8]]}}}