{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T15:32:14Z","timestamp":1772119934002,"version":"3.50.1"},"reference-count":64,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,5,1]],"date-time":"2021-05-01T00:00:00Z","timestamp":1619827200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2021,5,1]],"date-time":"2021-05-01T00:00:00Z","timestamp":1619827200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,5]]},"DOI":"10.1109\/sp40001.2021.00110","type":"proceedings-article","created":{"date-parts":[[2021,8,26]],"date-time":"2021-08-26T21:03:31Z","timestamp":1630011811000},"page":"1485-1501","source":"Crossref","is-referenced-by-count":12,"title":["Breaking the Specification: PDF Certification"],"prefix":"10.1109","author":[{"given":"Simon","family":"Rohlmann","sequence":"first","affiliation":[{"name":"Ruhr University Bochum"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vladislav","family":"Mladenov","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christian","family":"Mainka","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"J\u00f6rg","family":"Schwenk","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","article-title":"Electronic signatures and infrastructures (esi); pdf advanced electronic signature profiles; part 4","year":"2009","journal-title":"Tech Rep"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63688-7_19"},{"key":"ref12","year":"0","journal-title":"Digitally Signed PDFs"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1080\/19393555.2014.998843"},{"key":"ref15","year":"0","journal-title":"Adobe Acrobat Online Service"},{"key":"ref59","first-page":"28","article-title":"Digital signature trust vulnerability: A new attack on digital signatures","volume":"4","author":"buccafurri","year":"2005","journal-title":"Information Management & Computer Security"},{"key":"ref14","author":"docusign","year":"2018","journal-title":"Docusign validation service"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232811"},{"key":"ref53","author":"grigg","year":"2008","journal-title":"Technologists on signatures looking in the wrong place"},{"key":"ref52","year":"2020","journal-title":"Allow changes to parts of a protected document"},{"key":"ref11","year":"0","journal-title":"Collection of Certified Documents by the United States Government Publishing Office (GPO)"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-009-0128-2"},{"key":"ref10","year":"0","journal-title":"Congressional Bills"},{"key":"ref54","author":"grigg","year":"2012","journal-title":"Signatures on fax & email -if you did not intend to be bound why did you bother to write it?"},{"key":"ref17","year":"2018","journal-title":"Rtrsignatur-prüfung"},{"key":"ref16","year":"2018","journal-title":"Dss demonstration webapp v5 3 1"},{"key":"ref19","author":"doo","year":"2018","journal-title":"Vep e-obrazci"},{"key":"ref18","author":"group","year":"2018","journal-title":"Ellis digital signature"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24117"},{"key":"ref50","year":"2020","journal-title":"Javascript controls -acrobat application security guide"},{"key":"ref46","article-title":"Portable Document Format (PDF) Security Analysis and Malware Threats","author":"hamon","year":"2012","journal-title":"Black Hat Abu Dhabi"},{"key":"ref45","author":"esparza","year":"2014","journal-title":"Pdf attack - a journey from the exploit kit to the shellcode"},{"key":"ref48","article-title":"Threat Modelling Adobe PDF","author":"brandis","year":"2012","journal-title":"Command Control Communications and Intelligence Division DSTO Australien"},{"key":"ref47","author":"stokes","year":"2019","journal-title":"Malicious pdfs — revealing the techniques behind the attacks"},{"key":"ref42","year":"0","journal-title":"Adobe Acrobat DC Market Share and Competitor Report"},{"key":"ref41","year":"2019","journal-title":"Operating Systems - Statistics & Facts"},{"key":"ref44","article-title":"Electronic signatures and infrastructures (esi); cades baseline profile","year":"2012","journal-title":"Tech Rep"},{"key":"ref43","article-title":"Electronic signatures and infrastructures (esi); pdf advanced electronic signature profiles; part 1","year":"2009","journal-title":"Tech Rep"},{"key":"ref49","year":"2007","journal-title":"JavaScript for Acrobat API Reference - Adobe Acrobat SDK 8 1"},{"key":"ref8","year":"0","journal-title":"Definitions and Acronyms"},{"key":"ref7","year":"0","journal-title":"USER’S MANUAL SOFTWARE TO SIGN AND ENCRYPT DOCUMENTS"},{"key":"ref9","year":"0","journal-title":"Authentication"},{"key":"ref4","year":"0","journal-title":"Electronic Transactions Act"},{"key":"ref3","article-title":"Electronic signatures in global and national commerce act","year":"2000"},{"key":"ref6","year":"0","journal-title":"Electronic Approval Standards"},{"key":"ref5","year":"0","journal-title":"What is a Certified Document and when should you use it? [Online]"},{"key":"ref40","article-title":"Office document security and privacy","author":"m\u00fcller","year":"2020","journal-title":"14th USENIX Workshop on Offensive Technologies (WOOT 20)"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516723"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.14"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.3390\/ijgi7050193"},{"key":"ref36","first-page":"1709","article-title":"Code-reuse attacks for the web: Breaking cross-site scripting mitigations via script gadgets","author":"lekies","year":"0"},{"key":"ref31","author":"hom\u00e8s","year":"2013","journal-title":"Software Testing Fundamentals"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635924"},{"key":"ref33","first-page":"817","article-title":"Return of bleichenbacher’s oracle threat (ROBOT)","author":"b\u00f6ck","year":"2018","journal-title":"27th USENIX Security Symposium (USENIX Security 18)"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-25385-0_20"},{"key":"ref2","year":"2014","journal-title":"Regulation (EU) No 910\/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999\/93\/EC"},{"key":"ref1","year":"2020","journal-title":"Adobe Fast Facts"},{"key":"ref39","article-title":"How to break microsoft rights management services","author":"grothe","year":"0","journal-title":"10th USENIX Workshop on Offensive Technologies (WOOT 16)"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354214"},{"key":"ref24","year":"0","journal-title":"intarsys Online PDF Service"},{"key":"ref23","year":"0","journal-title":"iText Online PDF Service"},{"key":"ref26","article-title":"1 trillion dollar refund – how to spoof pdf signatures","author":"mladenov","year":"2019","journal-title":"ACM Conference on Computer and Communications Security"},{"key":"ref25","year":"2017","journal-title":"ISO 32000-2 2017 - Document management – Portable Document Format – Part 2 PDF 2 0"},{"key":"ref20","year":"2018","journal-title":"Dss demonstration webapp v5 2"},{"key":"ref64","article-title":"On breaking saml: Be whoever you want to be","author":"somorovsky","year":"2012","journal-title":"21st USENIX Security Symposium"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/1103022.1103026"},{"key":"ref22","year":"2018","journal-title":"Validate a signature"},{"key":"ref21","year":"2018","journal-title":"Siva demo application"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423360"},{"key":"ref27","first-page":"747","article-title":"Devils in the guidance: Predicting logic vulnerabilities in payment syndication services through automated documentation analysis","author":"chen","year":"0"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00593-0_25"},{"key":"ref60","first-page":"278","article-title":"Fortifying the dalì attack on digital signature","author":"buccafurri","year":"0"},{"key":"ref62","article-title":"This PDF is a JPEG; or, This Proof of Concept is a Picture of Cats","author":"albertini","year":"2014","journal-title":"PoC 11 GTFO 0x03"},{"key":"ref61","article-title":"Hiding malicious content in PDF documents","author":"popescu","year":"2012","journal-title":"CoRR"}],"event":{"name":"2021 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2021,5,24]]},"end":{"date-parts":[[2021,5,27]]}},"container-title":["2021 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/http\/xplorestaging.ieee.org\/ielx7\/9519381\/9519382\/09519390.pdf?arnumber=9519390","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T23:05:05Z","timestamp":1699484705000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/ieeexplore.ieee.org\/document\/9519390\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,5]]},"references-count":64,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1109\/sp40001.2021.00110","relation":{},"subject":[],"published":{"date-parts":[[2021,5]]}}}