NDSS
2009
IEEE
13 years 11 months ago
2009
IEEE
Cross-site scripting (or XSS) has been the most dominant class of web vulnerabilities in 2007. The main underlying reason for XSS vulnerabilities is that web markup and client-sid...
WWW
2007
ACM
14 years 5 months ago
2007
ACM
We show that the time web sites take to respond to HTTP requests can leak private information, using two different types of attacks. The first, direct timing, directly measures re...