Collected research

The Spy in the Sandbox: Practical Cache Attacks in JavaScript and their Implications

[1502.07373] The Spy in the Sandbox -- Practical Cache Attacks in Javascript

Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan and Angelos D. Keromytis · arXiv.org

A last-level cache side-channel attack that runs purely in JavaScript on a visited web page, needing no installed software on the victim machine. Timing its own memory accesses lets the page recover activity belonging to other processes, other users and co-resident virtual machines, demonstrated as a high bandwidth covert channel and a system-wide mouse and network activity logger.

Record

Document

[1502.07373] The Spy in the Sandbox -- Practical Cache Attacks in Javascript

Researcher

Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan and Angelos D. Keromytis

Published by

arXiv.org

Topic

Server

In the archive

• Collected in the 2015 research round

Related sources

• The Spy in the Sandbox: Practical Cache Attacks in JavaScript and their Implications (PDF) Whitepaper

Tags

• side-channel
• timing-attack
• javascript
• info-leak
• mitigation

This page is the archive's own catalogue record. The research is the work of Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan and Angelos D. Keromytis, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.