{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,31]],"date-time":"2026-10-31T16:23:48Z","timestamp":1793463828911,"version":"4.5.0"},"publisher-location":"Cham","reference-count":44,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031171420","type":"print"},{"value":"9783031171437","type":"electronic"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-17143-7_5","type":"book-chapter","created":{"date-parts":[[2022,9,23]],"date-time":"2022-09-23T04:04:22Z","timestamp":1663905862000},"page":"87-105","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Browser-Based CPU Fingerprinting"],"prefix":"10.1007","author":[{"given":"Leon","family":"Trampert","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christian","family":"Rossow","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Schwarz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,9,24]]},"reference":[{"key":"5_CR1","doi-asserted-by":"crossref","unstructured":"Agarwal, A., et al.: Spook.js: Attacking chrome strict site isolation via speculative execution (2022)","DOI":"10.1109\/SP46214.2022.9833711"},{"key":"5_CR2","doi-asserted-by":"crossref","unstructured":"Bosman, E., Razavi, K., Bos, H., Giuffrida, C.: Dedup Est machina: memory deduplication as an advanced exploitation vector. In: S &P (2016)","DOI":"10.1109\/SP.2016.63"},{"key":"5_CR3","unstructured":"Canella, C., et al.: Leaking Data on Meltdown-resistant CPUs. In: CCS (2019)"},{"key":"5_CR4","unstructured":"Canella, C., et al.: A Systematic Evaluation of Transient Execution Attacks and Defenses. In: USENIX Security Symposium, extended classification tree and PoCs (2019). https:\/\/transient.fail\/"},{"key":"5_CR5","doi-asserted-by":"crossref","unstructured":"Cao, Y., Li, S., Wijmans, E.: Browser Fingerprinting via OS and Hardware Level Features. In: NDSS (2017)","DOI":"10.14722\/ndss.2017.23152"},{"key":"5_CR6","unstructured":"Easdon, C., Schwarz, M., Schwarzl, M., Gruss, D.: Rapid Prototyping for Microarchitectural Attacks. In: USENIX Security (2022)"},{"key":"5_CR7","doi-asserted-by":"crossref","unstructured":"Eckersley, P.: How unique is your web browser? In: PETS (2010)","DOI":"10.1007\/978-3-642-14527-8_1"},{"key":"5_CR8","doi-asserted-by":"crossref","unstructured":"Englehardt, S., Narayanan, A.: Online tracking: a 1-million-site measurement and analysis. In: CCS (2016)","DOI":"10.1145\/2976749.2978313"},{"key":"5_CR9","doi-asserted-by":"crossref","unstructured":"Gras, B., Razavi, K.: ASLR on the Line: Practical Cache Attacks on the MMU. In: NDSS (2017)","DOI":"10.14722\/ndss.2017.23271"},{"key":"5_CR10","doi-asserted-by":"crossref","unstructured":"Gruss, D., Bidner, D., Mangard, S.: Practical memory deduplication attacks in sandboxed javascript. In: ESORICS (2015)","DOI":"10.1007\/978-3-319-24174-6_6"},{"key":"5_CR11","doi-asserted-by":"crossref","unstructured":"Gruss, D., Maurice, C., Mangard, S.: Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript. In: DIMVA (2016)","DOI":"10.1007\/978-3-319-40667-1_15"},{"key":"5_CR12","unstructured":"Handley, M.: M1 Exploration - v0.70 (2021)"},{"key":"5_CR13","unstructured":"Herath, N., Fogh, A.: These are Not Your Grand Daddys CPU Performance Counters - CPU Hardware Performance Counters for Security. In: Black Hat Briefings (2015)"},{"key":"5_CR14","unstructured":"Intel: Intel 64 and IA-32 Architectures Optimization Reference Manual (2019)"},{"key":"5_CR15","doi-asserted-by":"crossref","unstructured":"Kim, Y., et al.: Flipping Bits in Memory Without Accessing Them: an Experimental Study of DRAM Disturbance Errors. In: ISCA (2014)","DOI":"10.1109\/ISCA.2014.6853210"},{"key":"5_CR16","doi-asserted-by":"crossref","unstructured":"Kocher, P., et al.: Spectre attacks: exploiting speculative execution. In: S &P (2019)","DOI":"10.1109\/SP.2019.00002"},{"key":"5_CR17","unstructured":"Kohlbrenner, D., Shacham, H.: Trusted browsers for uncertain times. In: USENIX Security Symposium (2016)"},{"key":"5_CR18","doi-asserted-by":"crossref","unstructured":"Laperdrix, P., Bielova, N., Baudry, B., Avoine, G.: Browser fingerprinting: a survey. In: ACM Transactions on the Web (2020)","DOI":"10.1145\/3386040"},{"key":"5_CR19","doi-asserted-by":"crossref","unstructured":"Laperdrix, P., Rudametkin, W., Baudry, B.: Beauty and the beast: diverting modern web browsers to build unique browser fingerprints. In: S &P (2016)","DOI":"10.1109\/SP.2016.57"},{"key":"5_CR20","unstructured":"Lipp, M., et al.: Meltdown: reading Kernel memory from user space. In: USENIX Security Symposium (2018)"},{"key":"5_CR21","unstructured":"Mowery, K., Bogenreif, D., Yilek, S., Shacham, H.: Fingerprinting information in JavaScript implementations. In: W2SP (2011)"},{"key":"5_CR22","unstructured":"Mowery, K., Shacham, H.: Pixel perfect: fingerprinting canvas in HTML5. In: W2SP (2012)"},{"key":"5_CR23","doi-asserted-by":"crossref","unstructured":"Nikiforakis, N., Kapravelos, A., Joosen, W., Kruegel, C., Piessens, F., Vigna, G.: Cookieless monster: Exploring the ecosystem of web-based device fingerprinting. In: Security and privacy (SP) (2013)","DOI":"10.1109\/SP.2013.43"},{"key":"5_CR24","unstructured":"Olejnik, L., Englehardt, S., Narayanan, A.: Battery status not included: assessing privacy in web standards. In: Workshop on Privacy Engineering (IWPE) (2017)"},{"key":"5_CR25","doi-asserted-by":"crossref","unstructured":"Payer, M.: HexPADS: a platform to detect \"stealth\" attacks. In: ESSoS (2016)","DOI":"10.1007\/978-3-319-30806-7_9"},{"key":"5_CR26","unstructured":"Pedregosa, F., et al.: Scikit-learn: Machine learning in Python. J. Mach. Learn. Res. 12, pp. 2825\u20132830 (2011)"},{"key":"5_CR27","doi-asserted-by":"crossref","unstructured":"Ragab, H., Milburn, A., Razavi, K., Bos, H., Giuffrida, C.: CrossTalk: speculative data leaks across cores are real. In: S &P (2021)","DOI":"10.1109\/SP40001.2021.00020"},{"key":"5_CR28","unstructured":"R\u00f6ttger, S.: Escaping the Chrome Sandbox with RIDL (2020). https:\/\/googleprojectzero.blogspot.com\/2020\/02\/escaping-chrome-sandbox-with-ridl.html"},{"key":"5_CR29","doi-asserted-by":"crossref","unstructured":"Saito, T., et al.: Estimating CPU features by browser fingerprinting. In: International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS) (2016)","DOI":"10.1109\/IMIS.2016.108"},{"key":"5_CR30","doi-asserted-by":"crossref","unstructured":"Saito, T., Yasuda, K., Tanabe, K., Takahashi, K.: Web browser tampering: Inspecting CPU features from side-channel information. In: International Conference on Broad-Band Wireless Computing, Communication and Applications, BWCCA (2017)","DOI":"10.1007\/978-3-319-69811-3_36"},{"key":"5_CR31","doi-asserted-by":"crossref","unstructured":"Sanchez-Rola, I., Santos, I., Balzarotti, D.: Clock around the clock: time-based device fingerprinting. In: CCS (2018)","DOI":"10.1145\/3243734.3243796"},{"key":"5_CR32","doi-asserted-by":"crossref","unstructured":"van Schaik, S., et al.: RIDL: Rogue In-flight Data Load. In: S &P (2019)","DOI":"10.1109\/SP.2019.00087"},{"key":"5_CR33","doi-asserted-by":"crossref","unstructured":"Schwarz, M., Lackner, F., Gruss, D.: Javascript template attacks: automatically inferring host information for targeted exploits. In: NDSS (2019)","DOI":"10.14722\/ndss.2019.23155"},{"key":"5_CR34","doi-asserted-by":"crossref","unstructured":"Schwarz, M., Lipp, M., Gruss, D.: Javascript zero: real javascript and zero side-channel attacks. In: NDSS (2018)","DOI":"10.14722\/ndss.2018.23094"},{"key":"5_CR35","doi-asserted-by":"crossref","unstructured":"Schwarz, M., et al.: ZombieLoad: cross-privilege-boundary data sampling. In: CCS (2019)","DOI":"10.1145\/3319535.3354252"},{"key":"5_CR36","doi-asserted-by":"crossref","unstructured":"Schwarz, M., Maurice, C., Gruss, D., Mangard, S.: fantastic timers and where to find them: high-resolution microarchitectural attacks in javascript. In: FC (2017)","DOI":"10.1007\/978-3-319-70972-7_13"},{"key":"5_CR37","unstructured":"Schwarzl, M., et al.: Dynamic process isolation. arXiv:2110.04751 (2021)"},{"key":"5_CR38","unstructured":"Shusterman, A., Agarwal, A., O\u2019Connell, S., Genkin, D., Oren, Y., Yarom, Y.: Prime+probe 1, javascript 0: overcoming browser-based side-channel defenses. In: USENIX Security Symposium (2021)"},{"key":"5_CR39","unstructured":"R\u00f6ttger, S., Janc, A.: A Spectre proof-of-concept for a Spectre-proof web (2021). https:\/\/security.googleblog.com\/2021\/03\/a-spectre-proof-of-concept-for-spectre.html"},{"key":"5_CR40","doi-asserted-by":"crossref","unstructured":"Van Bulck, J., et al.: LVI: hijacking transient execution through microarchitectural load value injection. In: S &P (2020)","DOI":"10.1109\/SP40000.2020.00089"},{"key":"5_CR41","doi-asserted-by":"crossref","unstructured":"Vastel, A., Laperdrix, P., Rudametkin, W., Rouvoy, R.: Fp-stalker: Tracking browser fingerprint evolutions. In: S &P (2018)","DOI":"10.1109\/SP.2018.00008"},{"key":"5_CR42","doi-asserted-by":"crossref","unstructured":"Vila, P., K\u00f6pf, B., Morales, J.: Theory and practice of finding eviction sets. In: S &P (2019)","DOI":"10.1109\/SP.2019.00042"},{"key":"5_CR43","unstructured":"VUSec: RIDL test suite and exploits (GitHub) (2020). https:\/\/github.com\/vusec\/ridl"},{"key":"5_CR44","doi-asserted-by":"crossref","unstructured":"Wang, H., Sayadi, H., Sasan, A., Rafatirad, S., Homayoun, H.: Hybrid-shield: accurate and efficient cross-layer countermeasure for run-time detection and mitigation of cache-based side-channel attacks. In: ICCAD (2020)","DOI":"10.1145\/3400302.3418783"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2022"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-17143-7_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,23]],"date-time":"2022-09-23T04:05:15Z","timestamp":1663905915000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-17143-7_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031171420","9783031171437"],"references-count":44,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-17143-7_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"24 September 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2022.compute.dtu.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"562","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"104","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"12","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}