Web Hack List

Collected research

Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development

Sidebuster analyses web application source code to locate places where request and response sizes or timings vary with sensitive state, then reruns the application to measure how much entropy each such side channel leaks. It handles event-driven AJAX widgets and was prototyped for GWT applications, identifying leaks and grading their severity at low overhead even when traffic is fully encrypted.

Record

Researcher
Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang and Shuo Chen
Published by
Microsoft Research
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang and Shuo Chen, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .