Top 10 winner

Web Timing Attacks Made Practical

Timothy D. Morgan and Jason W. Morgan · Black Hat · 28 December 2015

Uses packet-sniffed, paired round-trip-time measurements and Monte Carlo comparisons of box-test and L-estimator classifiers to estimate how many samples a timing attack needs. Nanown packages collection, training and testing. Direct TCP timestamp classifiers performed poorly; the Kalman filter remained exploratory and was not incorporated into the tool or full results.

Record

Researcher

Timothy D. Morgan and Jason W. Morgan

Published by

Black Hat

Date

28 December 2015

Format

Recording

Topic

Other

In the archive

• Ranked #3 in the 2015 Top 10 Web Hacking Techniques

Related sources

• Web Timing Attacks Made Practical (Whitepaper) Whitepaper

Tags

• timing-attack
• side-channel
• info-leak
• http
• tooling
• measurement-study

This page is the archive's own catalogue record. The research is the work of Timothy D. Morgan and Jason W. Morgan, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 September 2026.