<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01567587</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T15:09:35+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Detecting Hidden Storage Side Channel Vulnerabilities in Networked Applications</title>
            <author role="aut">
              <persName>
                <forename type="first">Felix</forename>
                <forename type="middle">C.</forename>
                <surname>Freiling</surname>
              </persName>
              <idno type="halauthorid">1205201-0</idno>
              <affiliation ref="#struct-254729"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sebastian</forename>
                <surname>Schinzel</surname>
              </persName>
              <idno type="halauthorid">1205202-0</idno>
              <affiliation ref="#struct-254729"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-07-24 10:40:11</date>
              <date type="whenModified">2024-12-18 22:58:02</date>
              <date type="whenReleased">2017-07-24 10:42:16</date>
              <date type="whenProduced">2011-06-07</date>
              <date type="whenEndEmbargoed">2014-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01567587v1/document">
                <date notBefore="2014-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01567587v1/file/978-3-642-21424-0_4_Chapter.pdf" id="file-1567587-1620202">
                <date notBefore="2014-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-21424-0_4.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01567587</idno>
            <idno type="halUri">https://inria.hal.science/hal-01567587</idno>
            <idno type="halBibtex">freiling:hal-01567587</idno>
            <idno type="halRefHtml">&lt;i&gt;26th International Information Security Conference (SEC)&lt;/i&gt;, Jun 2011, Lucerne, Switzerland. pp.41-55, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-21424-0_4"&gt;&amp;#x27E8;10.1007/978-3-642-21424-0_4&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">26th International Information Security Conference (SEC), Jun 2011, Lucerne, Switzerland. pp.41-55, &amp;#x27E8;10.1007/978-3-642-21424-0_4&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1567587-1620202"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-354" corresp="IFIP-AICT">Future Challenges in Security and Privacy for Academia and Industry</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 2: Malware, Information Flow and DoS Attacks</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Detecting Hidden Storage Side Channel Vulnerabilities in Networked Applications</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Felix</forename>
                    <forename type="middle">C.</forename>
                    <surname>Freiling</surname>
                  </persName>
                  <idno type="halauthorid">1205201-0</idno>
                  <affiliation ref="#struct-254729"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sebastian</forename>
                    <surname>Schinzel</surname>
                  </persName>
                  <idno type="halauthorid">1205202-0</idno>
                  <affiliation ref="#struct-254729"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>26th International Information Security Conference (SEC)</title>
                  <date type="start">2011-06-07</date>
                  <date type="end">2011-06-09</date>
                  <settlement>Lucerne</settlement>
                  <country key="CH">Switzerland</country>
                </meeting>
                <editor>Jan Camenisch</editor>
                <editor>Simone Fischer-Hübner</editor>
                <editor>Yuko Murayama</editor>
                <editor>Armand Portmann</editor>
                <editor>Carlos Rieder</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Future Challenges in Security and Privacy for Academia and                    Industry</biblScope>
                  <biblScope unit="volume">AICT-354</biblScope>
                  <biblScope unit="pp">41-55</biblScope>
                  <date type="datePub">2011</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-21424-0_4</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Side channels are communication channels that were not intended for communication and that accidentally leak information. A storage side channel leaks information through the content of the channel and not its timing behavior. Storage side channels are a large problem in networked applications since the output at the level of the protocol encoding (e.g., HTTP and HTML) often depends on data and control flow. We call such channels hidden because the output differences blend with the noise of the channel. Within a formal system model, we give a necessary and sufficient condition for such storage side channels to exist. Based on this condition, we develop a method to detect this kind of side channels. The method is based on systematic comparisons of network responses of web applications. We show that this method is useful in practice by exhibiting hidden storage side channels in three well-known web applications: Typo3, Postfix Admin, and Zenith Image Gallery</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-254729" status="VALID">
          <idno type="ROR">https://ror.org/031bsb921</idno>
          <orgName>University of Mannheim = Universität Mannheim</orgName>
          <desc>
            <address>
              <addrLine>Schloss, 68131 Mannheim</addrLine>
              <country key="DE"/>
            </address>
            <ref type="url">https://www.uni-mannheim.de/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>