Abstract:
To provide more relevant content and better responsiveness, many websites customize their services according to users' geolocations. However, if geo-oriented websites lea...Show MoreMetadata
Abstract:
To provide more relevant content and better responsiveness, many websites customize their services according to users' geolocations. However, if geo-oriented websites leave location-sensitive content in the browser cache, other sites can sniff that content via side channels. The authors' case studies demonstrate the reliability and power of geo-inference attacks, which can measure the timing of browser cache queries and track a victim's country, city, and neighborhood. Existing defenses cannot effectively prevent such attacks, and additional support is required for a better defense deployment.
Published in: IEEE Internet Computing ( Volume: 19, Issue: 1, Jan.-Feb. 2015)
DOI: 10.1109/MIC.2014.103
National University of Singapore
Yaoqi Jia is a PhD student in the Department of Computer Science at the National University of Singapore. He works on discovering new security vulnerabilities and attack vectors in Web and mobile applications, as well as on exploring new solutions to eliminate them from today's applications. Jia obtained his BS in computer science from the Huazhong University of Science and Technology. Contact him at jiayaoqi@comp.nus.edu...Show More
Yaoqi Jia is a PhD student in the Department of Computer Science at the National University of Singapore. He works on discovering new security vulnerabilities and attack vectors in Web and mobile applications, as well as on exploring new solutions to eliminate them from today's applications. Jia obtained his BS in computer science from the Huazhong University of Science and Technology. Contact him at jiayaoqi@comp.nus.edu...View more
Advanced Digital Sciences Center
Xinshu Dong is a postdoctoral fellow at the Advanced Digital Sciences Center and a research affiliate in the University of Illinois's Coordinated Sciences Laboratory. His research interest spans the broad areas of security in software systems and cyber-physical systems. Dong obtained his PhD in computer science from the National University of Singapore. Contact him at xinshu.dong@adsc.com.sg.
Xinshu Dong is a postdoctoral fellow at the Advanced Digital Sciences Center and a research affiliate in the University of Illinois's Coordinated Sciences Laboratory. His research interest spans the broad areas of security in software systems and cyber-physical systems. Dong obtained his PhD in computer science from the National University of Singapore. Contact him at xinshu.dong@adsc.com.sg.View more
National University of Singapore
Zhenkai Liang is an associate professor at the National University of Singapore. His research interests include system and software security, Web security, mobile security, and software testing. Liang obtained his PhD in computer science from Stony Brook University. Contact him at liangzk@comp.nus.edu.sg.
Zhenkai Liang is an associate professor at the National University of Singapore. His research interests include system and software security, Web security, mobile security, and software testing. Liang obtained his PhD in computer science from Stony Brook University. Contact him at liangzk@comp.nus.edu.sg.View more
National University of Singapore
Prateek Saxena is an assistant professor at the National University of Singapore. His research interests include computer security and its intersection with formal methods and programming languages. Saxena obtained his PhD in computer science from the University of California, Berkeley. Contact him at prateeks@comp.nus.edu.sg.
Prateek Saxena is an assistant professor at the National University of Singapore. His research interests include computer security and its intersection with formal methods and programming languages. Saxena obtained his PhD in computer science from the University of California, Berkeley. Contact him at prateeks@comp.nus.edu.sg.View more
National University of Singapore
Yaoqi Jia is a PhD student in the Department of Computer Science at the National University of Singapore. He works on discovering new security vulnerabilities and attack vectors in Web and mobile applications, as well as on exploring new solutions to eliminate them from today's applications. Jia obtained his BS in computer science from the Huazhong University of Science and Technology. Contact him at jiayaoqi@comp.nus.edu.sg.
Yaoqi Jia is a PhD student in the Department of Computer Science at the National University of Singapore. He works on discovering new security vulnerabilities and attack vectors in Web and mobile applications, as well as on exploring new solutions to eliminate them from today's applications. Jia obtained his BS in computer science from the Huazhong University of Science and Technology. Contact him at jiayaoqi@comp.nus.edu.sg.View more
Advanced Digital Sciences Center
Xinshu Dong is a postdoctoral fellow at the Advanced Digital Sciences Center and a research affiliate in the University of Illinois's Coordinated Sciences Laboratory. His research interest spans the broad areas of security in software systems and cyber-physical systems. Dong obtained his PhD in computer science from the National University of Singapore. Contact him at xinshu.dong@adsc.com.sg.
Xinshu Dong is a postdoctoral fellow at the Advanced Digital Sciences Center and a research affiliate in the University of Illinois's Coordinated Sciences Laboratory. His research interest spans the broad areas of security in software systems and cyber-physical systems. Dong obtained his PhD in computer science from the National University of Singapore. Contact him at xinshu.dong@adsc.com.sg.View more
National University of Singapore
Zhenkai Liang is an associate professor at the National University of Singapore. His research interests include system and software security, Web security, mobile security, and software testing. Liang obtained his PhD in computer science from Stony Brook University. Contact him at liangzk@comp.nus.edu.sg.
Zhenkai Liang is an associate professor at the National University of Singapore. His research interests include system and software security, Web security, mobile security, and software testing. Liang obtained his PhD in computer science from Stony Brook University. Contact him at liangzk@comp.nus.edu.sg.View more
National University of Singapore
Prateek Saxena is an assistant professor at the National University of Singapore. His research interests include computer security and its intersection with formal methods and programming languages. Saxena obtained his PhD in computer science from the University of California, Berkeley. Contact him at prateeks@comp.nus.edu.sg.
Prateek Saxena is an assistant professor at the National University of Singapore. His research interests include computer security and its intersection with formal methods and programming languages. Saxena obtained his PhD in computer science from the University of California, Berkeley. Contact him at prateeks@comp.nus.edu.sg.View more