The DOI matches its Crossref record; 4 of the 4 references it cites were found in a registry or an index.
The Matter of Heartbleed
Open accessAbstract
The Heartbleed vulnerability took the Internet by surprise in April 2014. The vulnerability, one of the most consequential since the advent of the commercial Internet, allowed attackers to remotely read protected memory from an estimated 24--55% of popular HTTPS sites. In this work, we perform a comprehensive, measurement-based analysis of the vulnerability's impact, including (1) tracking the vulnerable population, (2) monitoring patching behavior over time, (3) assessing the impact on the HTTPS certificate ecosystem, and (4) exposing real attacks that attempted to exploit the bug. Furthermore, we conduct a large-scale vulnerability notification experiment involving 150,000 hosts and observe a nearly 50% increase in patching by notified hosts. Drawing upon these analyses, we discuss what went well and what went poorly, in an effort to understand how the technical community can respond more effectively to such events in the future.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Bro: a system for detecting network intruders in real-time
Paxson, V. (1999) · Computer Networks · doi:10.1016/s1389-1286(99)00112-7 · Cited by 2,636
Self-citationZMap: fast internet-wide scanning and its security applications
Durumeric, Z., Wustrow, E., & Halderman, J. A. (2013) · Cited by 652
Self-citationAnalysis of the HTTPS certificate ecosystem
Durumeric, Z., Kasten, J., Bailey, M., & Halderman, J. A. (2013) · Proceedings of the 2013 conference on Internet measurement conference · doi:10.1145/2504730.2504755 · Cited by 286
Self-citationWhen private keys are public: results from the 2008 Debian OpenSSL vulnerability
Yilek, S., Rescorla, E., Shacham, H., Enright, B., & Savage, S. (2009) · Proceedings of the 9th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1644893.1644896 · Cited by 164
Research works printed but not linked: 8
- The Heartbleed Hit List : The Passwords You Need to Change Right Now , Apr. 2014 . http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/. The Heartbleed Hit List: The Passwords You Need to Change Right Now, Apr. 2014. http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/.
- Bitcoin. OpenSSL Heartbleed Vulnerability , Apr. 2014 . https://bitcoin.org/en/alert/2014-04--11-heartbleed. Bitcoin. OpenSSL Heartbleed Vulnerability, Apr. 2014. https://bitcoin.org/en/alert/2014-04--11-heartbleed.
- L. Grangeia . Heartbleed , Cupid and Wireless , May 2014 . http://www.sysvalue.com/en/heartbleed-cupid-wireless/. L. Grangeia. Heartbleed, Cupid and Wireless, May 2014. http://www.sysvalue.com/en/heartbleed-cupid-wireless/.
- S. Grant . The Bleeding Hearts Club: Heartbleed Recovery for System Administrators , Apr. 2014 . https://www.eff.org/deeplinks/2014/04/bleeding-hearts-club-heartbleed-recovery-system-administrators. S. Grant. The Bleeding Hearts Club: Heartbleed Recovery for System Administrators, Apr. 2014. https://www.eff.org/deeplinks/2014/04/bleeding-hearts-club-heartbleed-recovery-system-administrators.
- B. Grubb . Heartbleed Disclosure Timeline: Who Knew What and When . Apr. 2014 . http://www.smh.com.au/it-pro/security-it/heartbleed-disclosure-timeline-who-knew-what-and-when-20140415-zqurk.html. B. Grubb. Heartbleed Disclosure Timeline: Who Knew What and When. Apr. 2014. http://www.smh.com.au/it-pro/security-it/heartbleed-disclosure-timeline-who-knew-what-and-when-20140415-zqurk.html.
- M. Masnick . Shameful Security: StartCom Charges People To Revoke SSL Certs Vulnerable to Heartbleed , Apr. 2014 . http://www.techdirt.com/articles/20140409/11442426859/shameful-security-startcom-charges-people-to-revoke-ssl-certs-vulnerable-to-heartbleed.shtml. M. Masnick. Shameful Security: StartCom Charges People To Revoke SSL Certs Vulnerable to Heartbleed, Apr. 2014. http://www.techdirt.com/articles/20140409/11442426859/shameful-security-startcom-charges-people-to-revoke-ssl-certs-vulnerable-to-heartbleed.shtml.
- E. Ng . Tunnel Fails after OpenSSL Patch , Apr. 2014 . https://lists.openswan.org/pipermail/users/2014-April/022934.html. E. Ng. Tunnel Fails after OpenSSL Patch, Apr. 2014. https://lists.openswan.org/pipermail/users/2014-April/022934.html.
- P. Ondruska . Does OpenSSL CVE-2014-0160 Effect Jetty Users ', Apr. 2014 . http://dev.eclipse.org/mhonarc/lists/jetty-users/msg04624.html. P. Ondruska. Does OpenSSL CVE-2014-0160 Effect Jetty Users', Apr. 2014. http://dev.eclipse.org/mhonarc/lists/jetty-users/msg04624.html.
Cited by
Algorithms and their others: Algorithmic culture in context
Dourish, P. (2016) · Big Data & Society · doi:10.1177/2053951716665128 · Cited by 481
A Survey on Systems Security Metrics
Pendleton, M., Garcia-Lebron, R., Cho, J.-H., & Xu, S. (2017) · ACM Computing Surveys · doi:10.1145/3005714 · Cited by 283
SoK: Taxonomy of Attacks on Open-Source Software Supply Chains
Ladisa, P., Plate, H., Martinez, M., & Barais, O. (2023) · 2023 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp46215.2023.10179304 · Cited by 208
SoK: Computer-Aided Cryptography
Barbosa, M., Barthe, G., Bhargavan, K., Blanchet, B., Cremers, C., Liao, K., & Parno, B. (2021) · 2021 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp40001.2021.00008 · Cited by 143
No Need to Hide: Protecting Safe Regions on Commodity Hardware
Koning, K., Chen, X., Bos, H., Giuffrida, C., & Athanasopoulos, E. (2017) · Proceedings of the Twelfth European Conference on Computer Systems · doi:10.1145/3064176.3064217 · Cited by 116
Metadata
- Authors
- Durumeric, Z., Li, F., Kasten, J., Amann, J., Beekman, J., Payer, M., Weaver, N., Adrian, D., Paxson, V., Bailey, M., & Halderman, J. A.
- Venue
- Proceedings of the 2014 Conference on Internet Measurement Conference
- Publisher
- ACM
- Published
- 2014-11-05
- Pages
- 475-488
- OpenAlex
- W2112736324
- Cited by
- 668
- References
- 4
- FWCI
- 54.15
- Type
- conference paper
- Language
- en
- Open access
- gold
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: The Matter of Heartbleed. https://app.cochat.ai/papers/10.1145/2663716.2663755
- The paper
- Durumeric, Z., Li, F., Kasten, J., Amann, J., Beekman, J., Payer, M., Weaver, N., Adrian, D., Paxson, V., Bailey, M., & Halderman, J. A. (2014). The Matter of Heartbleed. Proceedings of the 2014 Conference on Internet Measurement Conference. https://doi.org/10.1145/2663716.2663755
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
