We present a new attack framework for conducting cache-based side-channel attacks and
demonstrate this framework in attacks between tenants on commercial Platform-as-a …

We propose a method, based on program analysis and transformation, for eliminating timing
side channels in software code that implements security-critical applications. Our method …

Web-based timing attacks have been known for over a decade, and it has been shown that,
under optimal network conditions, an adversary can use such an attack to obtain information …

Cookies were originally introduced as a way to provide state awareness to websites, and
are now one of the backbones of the current web. However, their use is not limited to store …

A malicious alteration of system-provided timeline can negatively affect the reliability of
computer forensics. Indeed, detecting such changes and possibly reconstructing the correct …

Research has shown that timing side channels exist in web applications [1, 3, 5]. An
obvious, but problematic, mitigation for timing attacks is to delay the execution time to the …

Web Application Firewalls (WAFs) are used to detect and block attacks against vulnerable
web applications. They distinguish benign requests from rogue requests using a set of filter …

Side channels are communication channels that were not intended for communication and
that accidentally leak information. A storage side channel leaks information through the …

Side channels are vulnerabilities that can be attacked by observing the behaviour of
applications and by inferring sensitive information just from this behaviour. Because side …

The malicious alteration of machine time is a big challenge in computer forensics. Detecting
such changes and reconstructing the actual timeline of events is of paramount importance …