{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T15:54:52Z","timestamp":1776182092555,"version":"3.50.1"},"reference-count":46,"publisher":"MDPI AG","issue":"8","license":[{"start":{"date-parts":[[2022,7,30]],"date-time":"2022-07-30T00:00:00Z","timestamp":1659139200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"European Commission\u2019s Horizon 2020 program\u2019s NGI Fed4Fire+","award":["# 732638"],"award-info":[{"award-number":["# 732638"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>Life without computers is unimaginable. However, computers remain vulnerable to cybercrimes, a USD 6 trillion industry that the world has come to accept as a \u201cnecessary evil\u201d. Third-party permissions resulting in an attack surface (AS) and in-computer storage that computers mandate are key design elements that hackers exploit, formerly by remote malware installation and later by stealing personal data using authentication faking techniques. In legacy computers, the AS cannot be completely eliminated, nor can a connected device retain data offline, rendering fool-proof cybersecurity impossible. Although the architects of legacy computers made perfectly reasonable engineering trade-offs for their world, our world is very different. Zero vulnerability computing (ZVC) challenges the impossible with in-computer offline storage (ICOS) and Supra OS (SOS), to deliver comprehensive protection against vulnerabilities. The feasibility of ZVC is demonstrated in a tiny permanently computer-mounted hardware wallet, providing the first evidence of the complete obliteration of the AS. Malware cannot infect the ZVC device on account of lacking an AS, nor can personal data be hacked as they mostly remain offline, except for sporadic processing. Further research should explore whether ZVC can fully secure computers in more complex real-world scenarios and open a new epoch in the evolution of computers and the Internet.<\/jats:p>","DOI":"10.3390\/fi14080238","type":"journal-article","created":{"date-parts":[[2022,7,31]],"date-time":"2022-07-31T23:37:29Z","timestamp":1659310649000},"page":"238","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Will Zero Vulnerability Computing (ZVC) Ever Be Possible? Testing the Hypothesis"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7766-6949","authenticated-orcid":false,"given":"Fazal","family":"Raheman","sequence":"first","affiliation":[{"name":"Blockchain 5.0 Ltd., Kesklinna Linnaosa, Ahtri tn 12, 10151 Tallinn, Estonia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tejas","family":"Bhagat","sequence":"additional","affiliation":[{"name":"Blockchain 5.0 Ltd., Kesklinna Linnaosa, Ahtri tn 12, 10151 Tallinn, Estonia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Brecht","family":"Vermeulen","sequence":"additional","affiliation":[{"name":"IDLab iGent Tower\u2014Department of Information Technology, IMEC\u2014Ghent University, Technologiepark-Zwijnaarde 126, B-9052 Ghent, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter","family":"Van Daele","sequence":"additional","affiliation":[{"name":"IDLab iGent Tower\u2014Department of Information Technology, IMEC\u2014Ghent University, Technologiepark-Zwijnaarde 126, B-9052 Ghent, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,7,30]]},"reference":[{"key":"ref_1","unstructured":"Morgan, S. (2020, November 13). Cybercrime to Cost the World $10.5 Trillion Annually by 2025. Available online: https:\/\/cybersecurityventures.com\/cybercrime-damages-6-trillion-by-2021\/."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1837","DOI":"10.1109\/OJCOMS.2020.3038704","article-title":"A Superficial Analysis Approach for Identifying Malicious Domain Names Generated by DGA Malware","volume":"1","author":"Satoh","year":"2020","journal-title":"IEEE Open J. Commun. Soc."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Adhikary, T., Jana, A.D., Chakrabarty, A., and Jana, S.K. (2019). The Internet of Things (IoT) Augmentation in Healthcare: An Application Analytics. International Conference on Intelligent Computing and Communication Technologies, Springer.","DOI":"10.1007\/978-981-13-8461-5_66"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Davis, G. (2018, January 12\u201315). 2020: Life with 50 billion connected devices. Proceedings of the 2018 IEEE International Conference on Innovative Research and Development (ICCE), Las Vegas, NV, USA.","DOI":"10.1109\/ICCE.2018.8326056"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Greco, G., and Montinaro, N. (2020). The phenomenon of cybercrime: From the transnational connotation to the need for globalization of justice. Eur. J. Soc. Sci. Stud., 6, Available online: https:\/\/doi.org\/10.46827\/ejsss.v6i1.956.","DOI":"10.46827\/ejsss.v6i1.956"},{"key":"ref_6","unstructured":"Manjoo, F. (2018, October 10). A Future Where Everything Becomes a Computer Is as Creepy as You Feared. New York Times. Available online: https:\/\/www.nytimes.com\/2018\/10\/10\/technology\/future-internet-of-things.html."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"550","DOI":"10.1038\/d41586-018-06033-9","article-title":"Governments want your smart devices to have stupid security flaws","volume":"560","author":"Aftergood","year":"2018","journal-title":"Nature"},{"key":"ref_8","unstructured":"Woodford, C. (2022, June 27). A Brief History of Computers. Available online: http:\/\/nmis.isti.cnr.it\/casarosa\/BDG\/supporto\/A%20brief%20history%20of%20computers.pdf."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"85714","DOI":"10.1109\/ACCESS.2020.2991734","article-title":"An overview on edge computing research","volume":"8","author":"Cao","year":"2020","journal-title":"IEEE Access"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1109\/MWC.2019.1800440","article-title":"Improving cloud gaming experience through mobile edge computing","volume":"6","author":"Zhang","year":"2019","journal-title":"IEEE Wirel. Commun."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Bartel, A., Klein, J., Le Traon, Y., and Monperrus, M. (2012, January 3\u20137). Automatically securing permission-based software by reducing the attack surface: An application to android. Proceedings of the 27th IEEE\/ACM International Conference on Automated Software Engineering, Essen, Germany.","DOI":"10.1145\/2351676.2351722"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Soni, R. (2016). SSL, Security, and Authentication. Nginx, Apress.","DOI":"10.1007\/978-1-4842-1656-9"},{"key":"ref_13","unstructured":"Weber, S., Kaufman, D., Thomas, D., and Cohn, A. (2019). Cybersecurity Futures 2025 Insights and Findings, Center for Long\u2013Term Cybersecurity, University of Berkley."},{"key":"ref_14","unstructured":"Anoop, S., and Ou, X. (2017). Security risk analysis of enterprise networks using probabilistic attack graphs. Network Security Metrics, Springer."},{"key":"ref_15","unstructured":"(2022, June 27). National Vulnerability Database, Available online: https:\/\/nvd.nist.gov\/vuln-metrics\/cvss."},{"key":"ref_16","unstructured":"(2022, June 27). CVE Details. Available online: https:\/\/www.cvedetails.com\/."},{"key":"ref_17","unstructured":"(2022, June 27). DVE Details. Available online: https:\/\/www.cvedetails.com\/top-50-products.php."},{"key":"ref_18","unstructured":"(2022, June 27). Statista [Online] Internet of Things (IoT) Connected Devices from 2015 to 2025 (in Billions). Available online: https:\/\/www.statista.com\/statistics\/471264\/iot-number-of-connected-devices-worldwide\/."},{"key":"ref_19","unstructured":"Dickson, B. (2016, November 29). What Bruce Schneier Teaches Us about IoT and Cybersecurity. Techtalk. Available online: https:\/\/bdtechtalks.com\/2016\/11\/29\/what-bruce-schneier-teaches-us-about-iot-and-cybersecurity\/."},{"key":"ref_20","unstructured":"The AV Test Institute GmbH (2022, March 10). Malware Statistics. Available online: https:\/\/www.av-test.org\/en\/statistics\/malware\/."},{"key":"ref_21","unstructured":"Canella, C., van Bulck, J., Schwarz, M., Lipp, M., von Berg, B., Ortner, P., Piessens, F., Evtyushkin, D., and Gruss, D. (2018, January 14\u201315). A systematic evaluation of transient execution attacks and defenses. Proceedings of the 28th USENIX Security Symposium, Santa Clara, CA, USA."},{"key":"ref_22","first-page":"3","article-title":"Reducing the Attack Surface of Dynamic Binary Instrumentation Frameworks","volume":"Volume 152","author":"Rocha","year":"2020","journal-title":"Developments and Advances in Defense and Security. Smart Innovation, Systems and Technologies"},{"key":"ref_23","unstructured":"Stafford, V.A. (2017). Zero Trust Architecture, NIST Special Publication."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"371","DOI":"10.1109\/TSE.2010.60","article-title":"An attack surface metric","volume":"37","author":"Manadhata","year":"2010","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Tung, Y.-H., Chuang, C.-J., and Shan, H.-L. (2014, January 17\u201319). A framework of code reuse in open source software. Proceedings of the 16th Asia-Pacific Network Operations and Management Symposium, Hsinchu, Taiwan.","DOI":"10.1109\/APNOMS.2014.6996525"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"102316","DOI":"10.1016\/j.cose.2021.102316","article-title":"Assessing IoT Enabled Cyber-Physical Attack Paths Against Critical Systems","volume":"107","author":"Stellios","year":"2021","journal-title":"Comput. Secur."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"338","DOI":"10.1007\/978-3-030-22479-0_18","article-title":"CASFinder: Detecting Common Attack Surface","volume":"Volume 11559","author":"Foley","year":"2019","journal-title":"Data and Applications Security and Privacy XXXIII"},{"key":"ref_28","unstructured":"Cran, J. (2019, May 23). The New Application Attack Surface. Kenna Security. Available online: https:\/\/www.kennasecurity.com\/blog\/the-new-application-attack-surface\/."},{"key":"ref_29","unstructured":"Cybersecurity Ventures, Herjavec Group (2018, October 12). Hypercopolypse: A Cybercrime Revelation. Cyentia Cybersecurity Research Library. Available online: https:\/\/library.cyentia.com\/report\/report_001392.html."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"198","DOI":"10.1038\/d41586-022-00339-5","article-title":"The race to save the Internet from quantum hackers","volume":"602","author":"Castelvecchi","year":"2022","journal-title":"Nature"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Rozell, D.J. (2022). Cash is king. Nature, 16.","DOI":"10.1038\/d41586-022-00418-7"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Grimes, R.A. (2019). Cryptography Apocalypse: Preparing for the Day When Quantum Computing Breaks Today\u2019s Crypto, John Wiley & Sons.","DOI":"10.1002\/9781119618232"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Zhang, Q., Liu, L., Pu, C., Dou, Q., Wu, L., and Zhou, W. (2018, January 2\u20137). A Comparative Study of Containers and Virtual Machines in Big Data Environment. Proceedings of the IEEE 11th International Conference on Cloud Computing (CLOUD), San Francisco, CA, USA.","DOI":"10.1109\/CLOUD.2018.00030"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"e2038","DOI":"10.1002\/nem.2038","article-title":"Enhancing IoT security through network softwarization and virtual security appliances","volume":"28","author":"Zarca","year":"2018","journal-title":"Int. J. Netw. Manag."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"393","DOI":"10.1016\/j.future.2020.11.004","article-title":"Resurrecting anti-virtualization and anti-debugging: Unhooking your hooks","volume":"116","author":"Apostolopoulos","year":"2021","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_36","unstructured":"Gupta, U. (2015). Comparison between security majors in virtual machine and linux containers. arXiv."},{"key":"ref_37","unstructured":"MacAskill, E., Thielman, S., and Oltermann, P. (2022, June 27). WikiLeaks Publishes \u2018Biggest Ever Leak of Secret CIA Documents\u2019. The Guardian, 2017. Available online: https:\/\/www.theguardian.com\/media\/2017\/mar\/07\/wikileaks-publishes-biggest-ever-leakof-secret-cia-documents-hackingsurveillance."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1145\/2870641","article-title":"Bridging the air gap between isolated networks and mobile phones in a practical cyber-attack","volume":"8","author":"Guri","year":"2017","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"ref_39","unstructured":"Johnson, D.B. (2019, January 08). The Defense Advanced Research Projects Agency I Looking for Security That Can Better Track and Protect Sensitive Data as It Moves from Highly Secure Systems to Insecure Ones. Available online: https:\/\/defensesystems.com\/2019\/01\/darpa-looks-to-guard-the-air-gap\/192351\/."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"1190","DOI":"10.1109\/TIFS.2019.2938404","article-title":"ODINI: Escaping Sensitive Data from Faraday-Caged, Air-Gapped Computers via Magnetic Fields","volume":"15","author":"Guri","year":"2020","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_41","unstructured":"Fazal, R. (2007). A Novel Method and System for Using Optical Disk Drive as Biometric Card Reader for Secure Online User Authentication. (No. 7,228,424), U.S. Patent, Available online: https:\/\/patents.google.com\/patent\/US7228424."},{"key":"ref_42","unstructured":"Younis, A.A., and Malaiya, Y.K. (2012, January 16\u201319). Relationship between Attack Surface and Vulnerability Density: A Case Study on Apache HTTP Server. Proceedings of the International Conference on Internet Computing (ICOMP), Las Vegas, NV, USA."},{"key":"ref_43","unstructured":"Pegg, D., and Cutler, S. (2021, July 18). What Is Pegasus and How Does It Hack Phones? The Guardian. Available online: https:\/\/www.theguardian.com\/news\/2021\/jul\/18\/what-is-pegasus-spyware-and-how-does-it-hack-phones."},{"key":"ref_44","unstructured":"Zhang, L., Lee, B., Ye, Y., and Qiao, Y. (2019). Ethereum transaction performance evaluation using test-nets. European Conference on Parallel Processing, Springer."},{"key":"ref_45","unstructured":"Raheman, F. (2021). A Novel Supra Operating System Software for The Next Generation Web 3.0. (Application 63\/202,188), U.S. Patent."},{"key":"ref_46","unstructured":"Raheman, F. (2021). In-Computer Offline Storage (ICOS) to Achieve Zero Vulnerability Computing (ZVC). (Application 63\/228,122), U.S. Patent."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/14\/8\/238\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T23:59:48Z","timestamp":1760140788000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/14\/8\/238"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7,30]]},"references-count":46,"journal-issue":{"issue":"8","published-online":{"date-parts":[[2022,8]]}},"alternative-id":["fi14080238"],"URL":"https:\/\/doi.org\/10.3390\/fi14080238","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,7,30]]}}}