The Matter of Heartbleed
University of California, Berkeley · University of Michigan–Ann Arbor · +3 more institutions
Abstract
The Heartbleed vulnerability took the Internet by surprise in April 2014. The vulnerability, one of the most consequential since the advent of the commercial Internet, allowed attackers to remotely read protected memory from an estimated 24--55% of popular HTTPS sites. In this work, we perform a comprehensive, measurement-based analysis of the vulnerability's impact, including (1) tracking the vulnerable population, (2) monitoring patching behavior over time, (3) assessing the impact on the HTTPS certificate ecosystem, and (4) exposing real attacks that attempted to exploit the bug. Furthermore, we conduct a large-scale vulnerability notification experiment involving 150,000 hosts and observe a nearly 50%…
Citation impact
- FWCI
- 81.18
- Percentile
- 100%
- References
- 5
Authors
11Topics & keywords
- Exploit
- Vulnerability (computing)
- Computer security
- Surprise
- Certificate
- Computer science
- The Internet
- Population