An independent evaluation of web timing attack and its countermeasure

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 1319-1324

  Nagami, Yoshitaka ^a   Miyamoto, Daisuke ^a   Hazeyama, Hiroaki ^a   Kadobayashi, Youki ^a  

^a NARA INSTITUTE OF SCIENCE AND TECHNOLOGY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION TIME; INDEPENDENT EVALUATION; INTERNATIONAL CONFERENCES; PRIVATE INFORMATION; RESPONSE TIME; RESPONSE TIMES; STATISTICAL TESTING; TIMING ATTACKS; USER NAME; WEB APPLICATIONS;

TIME MEASUREMENT;

EID: 49049108738     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.111     Document Type: Conference Paper

References (9)

1. M. Blaze and J. Lacy. Simple unix time quantization package, 1995.
2. A. Bortz and D. Boneh. Exposing Private Information by Timing Web Applications. In Proceedings 16th of World Wide Web Conference(WWW2007), pages 621-628, 2007.
3. D. A. F. Florêncio and C. Herley. A large-scale study of web password habits. In Proceedings 16th of World Wide Web Conference(WWW2007), pages 657-666, 2007.
4. P. C. Kocher. Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems. In CRYPTO, pages 104-113, 1996.
5. MySQL AB. MySQL AB:: The world's most popular open source database, 1995.
6. C. Shiftlett. Security corner: Cross-site request forgeries, 2004.
7. The PHP Group. PHP: Hypertext Preprocessor, 1995.
8. A. Waissbein and P. D. Saura. Timing Attacks for Recovering Private Entries From Database Engines. In Black Hat USA, 2007.
9. XOOPS. Official XOOPS Website, 2001.