Abstract Federated Learning (FL, or Collaborative Learning (CL)) has surely gained a
reputation for not only building Machine Learning (ML) models that rely on distributed …

Browser extension fingerprinting has garnered considerable attention recently due to the
twofold privacy loss that it incurs. Apart from facilitating tracking by augmenting browser …

Web-based timing attacks have been known for over a decade, and it has been shown that,
under optimal network conditions, an adversary can use such an attack to obtain information …

The privacy threats of online tracking have garnered considerable attention in recent years
from researchers and practitioners. This has resulted in users becoming more …

In this paper, we present two web-based attacks against local IoT devices that any malicious
web page or third-party script can perform, even when the devices are behind NATs. In our …

A web visit typically consists of the browser rendering a dynamically generated response
that is specifically tailored to the user. This generation of responses based on the currently …

Progressive Web App (PWA) is a new generation of Web application designed to provide
native app-like browsing experiences even when a browser is offline. PWAs make full use of …

Service workers are a powerful technology supported by all major modern browsers that can
improve users' browsing experience by offering capabilities similar to those of native …

We present four new history sniffing attacks. Our attacks fit into two classical categories—
visited-link attacks and cache-based attacks—but abuse new, modern browser features (eg …

Cross-Site Leaks (XS-Leaks) describe a client-side bug that allows an attacker to collect
side-channel information from a cross-origin HTTP resource. They are a significant threat to …