Side-Channel Leaks in Web Applications: A Reality Today, a Challenge Tomorrow

By Shuo Chen, Rui Wang, Xiaofeng Wang, Kehuan Zhang. IEEE Symposium on Security and Privacy, 2010

458 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/9837a70c231c0ef3d33c2c9f5b56afd40548acce

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Sociology and Political Science

Citations in the corpus

Invertible bloom lookup tables (2011, methodology): “We refer to such a structure as an invertible Bloom lookup table (IBLT).”
k-fingerprinting: A Robust Scalable Website Fingerprinting Technique (2015, background): “They showed that HTTPOS was successful in defending against a number of classifiers [5, 9, 21, 32].”
No NAT'd User Left Behind: Fingerprinting Users behind NAT from NetFlow Records Alone (2014, background): “Their basic [34], [35], [32], [4], [16], [24] [36], [12] Trafﬁc and Application Proﬁling [3], [25], [28] [37], [23], [15], [29] [6] Information Leaks [19], [30], [5], [33] Device Proﬁling [17], [11], [8] technique though cannot be used to re-identify users later on.”
VC3: Trustworthy Data Analytics in the Cloud Using SGX (2015, methodology): “Attackers may also use more advanced traffic analyses against VC3 [16], [56], [68].”
DupLESS: Server-Aided Encryption for Deduplicated Storage (2013, background): “We will not explicitly target resistance to traffic analysis attacks that abuse leakage of access patterns [48] or file lengths [24] [31] [40] [47] [59] [65] [72], though our system will be compatible with potential countermeasures.”
Collaborative Security (2015, background): “, CVE [MIT Corporation 2003b], Bugtrap [SecurityFocus 2003] and CERT [CMU 2004]). The system then finds the relationship among the alerts. By gathering, aggregating and correlating the alerts, the collaborative approach can find potential sophisticated attacks more macroscopically and precisely. In ”
The Melbourne Shuffle: Improving Oblivious Storage in the Cloud (2014, unknown): “, see [4, 14]).”
Privacy-Preserving Computation with Trusted Computing via Scramble-then-Compute (2017, background): “Unfortunately, such a channel could leak information about the data [17, 20, 45].”
A Systematic Approach to Developing and Evaluating Website Fingerprinting Defenses (2014, background): “Cai et al. [3] and Chen et al. [4] describe variants wherein an attacker aims to identify a web site instead of a web page.”
The Spy in the Sandbox - Practical Cache Attacks in Javascript (2015, unknown): “in [5].”
The most dangerous code in the world: validating SSL certificates in non-browser software (2012, background): “Side-channel attacks can extract information from encrypted traf-ﬁc even when SSL is correctly deployed [4, 19].”