Later archive addition

The Spy in the Sandbox: Practical Cache Attacks in JavaScript and their Implications

Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan and Angelos D. Keromytis · arXiv.org

A last-level cache side-channel attack that runs purely in JavaScript on a visited web page, needing no installed software on the victim machine. Timing its own memory accesses lets the page recover activity belonging to other processes, other users and co-resident virtual machines, demonstrated as a high bandwidth covert channel and a system-wide mouse and network activity logger.

Record

Researcher

Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan and Angelos D. Keromytis

Published by

arXiv.org

In the archive

• Added to the 2015 archive after the original list was published

Related sources

• PDF

Tags

• side-channel
• timing-attack
• javascript
• info-leak
• mitigation

This page is the archive's own catalogue record. The research is the work of Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan and Angelos D. Keromytis, first published at the original source. Preserved copies are kept so the citation survives its host.