UPDF AI

Request and Conquer: Exposing Cross-Origin Resource Size

Tom van Goethem,M. Vanhoef,F. Piessens,W. Joosen

2016 · DBLP: conf/uss/GoethemVPJ16
USENIX Security Symposium · 35 Citations

TLDR

This in-depth analysis finds several design flaws in the storage mechanisms of browsers, which allows an adversary to expose the exact size of any resource in mere seconds, and reports on a novel size-exposing technique against Wi-Fi networks.