Web Hack List

Collected research

Automated Black-Box Detection of Side-Channel Vulnerabilities in Web Applications

Encrypted web traffic still leaks application state through packet sizes and timing. The authors build a black-box tool that crawls an application repeatedly, treats the adversary as a multi-dimensional classifier, and scores leakage with a Fisher-criterion metric rather than entropy. Evaluated on deployed applications with proposed client and server defences in place.

Record

Researcher
Peter Chapman and David Evans
Published by
cs.virginia.edu
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Peter Chapman and David Evans, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .