journalarticle
The Broken Shield: Measuring Revocation Effectiveness in the Windows Code-Signing PKI
USENIX Security Symposium2018 34 citations31 references
Looking for the full paper…
Papers open inside SciRah from the original publisher or repository; SciRah never hosts them.
Abstract
No abstract is available from our sources. Use “Read paper” to view it.
TL;DRIt is shown that erroneously setting revocation dates causes signed malware to remain valid even after the certificate has been revoked, and failures in disseminating the revocations are reported, leading clients to continue trusting the revoked certificates. (Semantic Scholar)