Timing attacks on Web privacy

By Edward W. Felten, Michael A. Schneider. Conference on Computer and Communications Security, 2000

359 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Signal Processing

View Paper: https://www.semanticscholar.org/paper/70f340e80468832b7a293da8a4f1d08ed2786448

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

1. Thomas Ristenpart
2. Yinqian Zhang
3. Christopher Krügel
4. Engin Kirda
5. Michael K. Reiter
6. Ari Juels
7. Hovav Shacham
8. Fabian Monrose

In Computer Networks and Communications

1. Engin Kirda
2. Christopher Krügel
3. Noah J. Apthorpe
4. N. Feamster
5. Yinqian Zhang
6. Ranjit Jhala
7. Thorsten Holz
8. Sorin Lerner

In Signal Processing

1. Christopher Krügel
2. Yinqian Zhang
3. Engin Kirda
4. Thorsten Holz
5. Fabian Monrose
6. Ranjit Jhala
7. Sorin Lerner
8. Ari Juels

Citations in the corpus

• Statistical identification of encrypted Web browsing traffic (2002, background): “How ev er, it has been sho wn in [11] that in this case an y server, by including a request for an object from a particular site in its Web page (say, betw een requests for tw oobjects from the server itself), and measuring the delay introduced by this fetc h,can determine with high delity whether t”
• Cross-Tenant Side-Channel Attacks in PaaS Clouds (2014, background): “There have been various related timing attacks demonstrated on web privacy, e.g., [13, 22].”
• Spying on the Smart Home: Privacy Attacks and Defenses on Encrypted IoT Traffic (2017, background): “Internet browsing habits are also subject to privacy breaches by web-site fingerprinting attacks using network traffic meta-data [18, 21, 42].”
• An empirical study of privacy-violating information flows in JavaScript web applications (2010, background): “The possibility of history sniffing was first raised in the academic community a decade ago [9].”
• A Practical Attack to De-anonymize Social Network Users (2010, background): “For example, Felten and Schneider show an attack on web browsing history by analyzing caching operations [33], while Bortz and Boneh [34] use timing attacks to recover private information from web applications.”
• A multifaceted approach to understanding the botnet phenomenon (2006, background): “While DNS cache probing has been used recently for a number of purposes [7, 9, 14], we are not aware of any prior effort that used cache probing to infer a botnet’s footprint.”