{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,4]],"date-time":"2026-10-04T17:59:03Z","timestamp":1791136743427,"version":"4.1.0"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2012,8,21]],"date-time":"2012-08-21T00:00:00Z","timestamp":1345507200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J Cryptogr Eng"],"published-print":{"date-parts":[[2012,10]]},"DOI":"10.1007\/s13389-012-0036-0","type":"journal-article","created":{"date-parts":[[2012,8,20]],"date-time":"2012-08-20T18:48:09Z","timestamp":1345488489000},"page":"161-177","source":"Crossref","is-referenced-by-count":5,"title":["Pinpointing side-channel information leaks in web applications"],"prefix":"10.1007","volume":"2","author":[{"given":"Luke","family":"Mather","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Elisabeth","family":"Oswald","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2012,8,21]]},"reference":[{"issue":"1","key":"36_CR1","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1109\/TIT.1972.1054753","volume":"18","author":"S. Arimoto","year":"1972","unstructured":"Arimoto S.: An algorithm for computing the capacity of arbitrary memoryless channels. IEEE Trans. Inf. Theory 18(1), 14\u201320 (1972)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"36_CR2","doi-asserted-by":"crossref","unstructured":"Backes, M., K\u00f6pf, B.: Formally Bounding the side-channel leakage in unknown-message attacks. In: ESORICS, pp. 517\u2013532 (2008)","DOI":"10.1007\/978-3-540-88313-5_33"},{"key":"36_CR3","doi-asserted-by":"crossref","unstructured":"Backes, M., K\u00f6pf, B., Rybalchenko, A.: automatic discovery and quantification of information leaks. In: IEEE Symposium on Security and Privacy, pp. 141\u2013153 (2009)","DOI":"10.1109\/SP.2009.18"},{"key":"36_CR4","doi-asserted-by":"crossref","unstructured":"Berthold, O., Pfitzmann, A., Standtke, R.: The Disadvantages of free MIX routes and how to overcome them. In: Workshop on Design Issues in Anonymity and Unobservability, pp. 30\u201345 (2000)","DOI":"10.1007\/3-540-44702-4_3"},{"key":"36_CR5","doi-asserted-by":"crossref","unstructured":"Bissias, G.D., Liberatore, M., Jensen, D., Levine, B.N.: Privacy vulnerabilities in encrypted HTTP streams. In: Privacy Enhancing Technologies, pp. 1\u201311 (2005)","DOI":"10.1007\/11767831_1"},{"issue":"4","key":"36_CR6","doi-asserted-by":"crossref","first-page":"460","DOI":"10.1109\/TIT.1972.1054855","volume":"18","author":"R.E. Blahut","year":"1972","unstructured":"Blahut R.E.: Computation of channel capacity and rate distortion functions. IEEE Trans. Inf. Theory 18(4), 460\u2013473 (1972)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"36_CR7","doi-asserted-by":"crossref","unstructured":"Boreale, M., Pampaloni, F., Paolini, M.: Quantitative information flow, with a view. In: ESORICS, pp. 588\u2013606 (2011)","DOI":"10.1007\/978-3-642-23822-2_32"},{"key":"36_CR8","doi-asserted-by":"crossref","unstructured":"Chapman, P., Evans, D.: Automated black-box detection of side-channel vulnerabilities in web applications. In: ACM Conference on Computer and Communications Security, pp. 263\u2013274 (2011)","DOI":"10.1145\/2046707.2046737"},{"key":"36_CR9","doi-asserted-by":"crossref","unstructured":"Chatzikokolakis, K., Chothia, T., Guha, A.: Statistical measurement of information leakage. In: TACAS, pp. 390\u2013404 (2010)","DOI":"10.1007\/978-3-642-12002-2_33"},{"issue":"2\u20134","key":"36_CR10","doi-asserted-by":"crossref","first-page":"378","DOI":"10.1016\/j.ic.2007.07.003","volume":"206","author":"K. Chatzikokolakis","year":"2008","unstructured":"Chatzikokolakis K., Palamidessi C., Panangaden P.: Anonymity protocols as noisy channels. Inf. Comput. 206(2\u20134), 378\u2013401 (2008)","journal-title":"Inf. Comput."},{"issue":"1","key":"36_CR11","doi-asserted-by":"crossref","first-page":"65","DOI":"10.1007\/BF00206326","volume":"1","author":"D. Chaum","year":"1988","unstructured":"Chaum D.: The dining cryptographers problem: unconditional sender and recipient untraceability. J. Cryptol. 1(1), 65\u2013 (1988)","journal-title":"J. Cryptol."},{"key":"36_CR12","doi-asserted-by":"crossref","unstructured":"Chen, S., Wang, R., Wang, X., Zhang, K.: Side-channel leaks in web applications: a reality today, a challenge tomorrow. In: Proceedings of IEEE Symposium on Security and Privacy, 31st IEEE Symposium on Security and Privacy, pp. 191\u2013206. IEEE Computer Society, New York (2010)","DOI":"10.1109\/SP.2010.20"},{"key":"36_CR13","doi-asserted-by":"crossref","unstructured":"Chothia, T., Guha, A.: A statistical test for information leaks using continuous mutual information. In: CSF, pp. 177\u2013190 (2011)","DOI":"10.1109\/CSF.2011.19"},{"issue":"3","key":"36_CR14","doi-asserted-by":"crossref","first-page":"321","DOI":"10.3233\/JCS-2007-15302","volume":"15","author":"D. Clark","year":"2007","unstructured":"Clark D., Hunt S., Malacaria P.: A static analysis for quantifying information flow in a simple imperative language. J. Comput. Secur. 15(3), 321\u2013371 (2007)","journal-title":"J. Comput. Secur."},{"issue":"5","key":"36_CR15","doi-asserted-by":"crossref","first-page":"655","DOI":"10.3233\/JCS-2009-0353","volume":"17","author":"M.R. Clarkson","year":"2009","unstructured":"Clarkson M.R., Myers A.C., Schneider F.B.: Quantifying information flow with beliefs. J. Comput. Secur. 17(5), 655\u2013701 (2009)","journal-title":"J. Comput. Secur."},{"key":"36_CR16","doi-asserted-by":"crossref","unstructured":"Clau\u00df, S., Schiffner, S.: Structuring anonymity metrics. In: Digital Identity Management, pp. 55\u201362 (2006)","DOI":"10.1145\/1179529.1179539"},{"key":"36_CR17","doi-asserted-by":"crossref","unstructured":"D\u00edaz, C., Seys, S., Claessens, J., Preneel, B.: Towards measuring anonymity. In: Privacy Enhancing Technologies, pp. 54\u201368 (2002)","DOI":"10.1007\/3-540-36467-6_5"},{"key":"36_CR18","doi-asserted-by":"crossref","unstructured":"Dyer, K., Coull, S., Ristenpart, T., Shrimpton, T.: Peek-a-boo, I still see you: why traffic analysis countermeasures fail. In: IEEE Security and Privacy (2012)","DOI":"10.1109\/SP.2012.28"},{"key":"36_CR19","doi-asserted-by":"crossref","unstructured":"Edman, M., Sivrikaya, F., Yener, B.: A combinatorial approach to measuring anonymity. In: ISI, pp. 356\u2013363 (2007)","DOI":"10.1109\/ISI.2007.379497"},{"key":"36_CR20","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1111\/j.1469-1809.1936.tb02137.x","volume":"7","author":"R.A. Fisher","year":"1936","unstructured":"Fisher R.A.: The use of multiple measures in taxonomic problems. Ann. Eugen. 7, 179\u2013188 (1936)","journal-title":"Ann. Eugen."},{"key":"36_CR21","doi-asserted-by":"crossref","unstructured":"Gierlichs, B., Troncoso, C., D\u00edaz, C., Preneel, B., Verbauwhede, I.: Revisiting a combinatorial approach toward measuring anonymity. In: WPES, pp. 111\u2013116 (2008)","DOI":"10.1145\/1456403.1456422"},{"key":"36_CR22","unstructured":"Goodwill, G., Jun, B., Jaffe, J., Rohatgi, P.: A testing methodology for side-channel resistance validation. In: NIST Non-Invasive Attack Testing Workshop (2011)"},{"key":"36_CR23","doi-asserted-by":"crossref","unstructured":"Herrmann, D., Wendolsky, R., Federrath, H.: Website fingerprinting: attacking popular privacy enhancing technologies with the multinomial na\u00efve-bayes classifier. In: CCSW, pp. 31\u201342 (2009)","DOI":"10.1145\/1655008.1655013"},{"key":"36_CR24","unstructured":"Jaffe, J., Rohatgi, P., Witteman, M.: Efficient side-channel testing for public key algorithms: RSA case study. In: NIST Non-Invasive Attack Testing Workshop (2011)"},{"key":"36_CR25","doi-asserted-by":"crossref","unstructured":"Kesdogan, D., Egner, J., B\u00fcschkes, R.: Stop-and-Go-MIXes providing probabilistic anonymity in an open system. In: Information Hiding, pp. 83\u201398 (1998)","DOI":"10.1007\/3-540-49380-8_7"},{"key":"36_CR26","doi-asserted-by":"crossref","unstructured":"Liberatore, M., Levine, B.N.: Inferring the source of encrypted HTTP connections. In: ACM Conference on Computer and Communications Security, pp. 255\u2013263 (2006)","DOI":"10.1145\/1180405.1180437"},{"key":"36_CR27","unstructured":"Luo, X., Zhou, P., Chan, E.W.W., Lee, W., Chang, R.K.C., Perdisci, R.: HTTPOS: sealing information leaks with browser-side obfuscation of encrypted flows. In: NDSS (2011)"},{"key":"36_CR28","doi-asserted-by":"crossref","unstructured":"Mantel, H., Sudbrock, H.: Information-theoretic modeling and analysis of interrupt-related covert channels. In: Formal Aspects in Security and Trust, pp. 67\u201381 (2008)","DOI":"10.1007\/978-3-642-01465-9_5"},{"key":"36_CR29","doi-asserted-by":"crossref","unstructured":"Millen, J.K.: Covert channel capacity. In: IEEE Symposium on Security and Privacy, pp. 60\u201366 (1987)","DOI":"10.1109\/SP.1987.10013"},{"key":"36_CR30","doi-asserted-by":"crossref","unstructured":"Moskowitz, I.S., Newman, R.E., Crepeau, D.P., Miller, A.R.: Covert channels and anonymizing networks. In: WPES, pp. 79\u201388 (2003)","DOI":"10.21236\/ADA465268"},{"key":"36_CR31","doi-asserted-by":"crossref","unstructured":"Moskowitz, I.S., Newman, R.E., Syverson, P.: Quasi-anonymous channels. In: IASTED CNIS, pp. 126\u2013131 (2003)","DOI":"10.21236\/ADA465128"},{"key":"36_CR32","doi-asserted-by":"crossref","unstructured":"Newman, R.E., Nalla, V.R., Moskowitz, I.S.: Anonymity and covert channels in simple timed mix-firewalls. In: Privacy Enhancing Technologies, pp. 1\u201316 (2004)","DOI":"10.1007\/11423409_1"},{"key":"36_CR33","unstructured":"NHS Direct Symptoms Checker. http:\/\/www.nhsdirect.nhs.uk\/CheckSymptoms.aspx . Accessed 2012"},{"key":"36_CR34","doi-asserted-by":"crossref","unstructured":"Panchenko, A., Niessen, L., Zinnen, A., Engel, T.: Website fingerprinting in onion routing based anonymization networks. In: WPES (2011)","DOI":"10.1145\/2046556.2046570"},{"issue":"6","key":"36_CR35","doi-asserted-by":"crossref","first-page":"1191","DOI":"10.1162\/089976603321780272","volume":"15","author":"L. Paninski","year":"2003","unstructured":"Paninski L.: Estimation of entropy and mutual information. Neural Comput. 15(6), 1191\u20131253 (2003)","journal-title":"Neural Comput."},{"key":"36_CR36","unstructured":"Selenium: Selenium remote control. http:\/\/seleniumhq.org . Accessed 2012"},{"key":"36_CR37","doi-asserted-by":"crossref","unstructured":"Serjantov, A., Danezis, G.: Towards an information theoretic metric for anonymity. In: Privacy Enhancing Technologies, pp. 41\u201353 (2002)","DOI":"10.1007\/3-540-36467-6_4"},{"key":"36_CR38","doi-asserted-by":"crossref","unstructured":"Standaert, F.X., Malkin, T., Yung, M.: A unified framework for the analysis of side-channel key recovery attacks. In: EUROCRYPT, pp. 443\u2013461 (2009)","DOI":"10.1007\/978-3-642-01001-9_26"},{"key":"36_CR39","unstructured":"T\u00f3th, G., Horn\u00e1k, Z., Vajda, F.: Measuring anonymity revisited. In: Proceedings of the Ninth Nordic Workshop on Secure IT Systems, pp. 85\u201390 (2004)"},{"key":"36_CR40","doi-asserted-by":"crossref","unstructured":"Zhang, K., Li, Z., Wang, R., Wang, X., Chen, S.: Sidebuster: automated detection and quantification of side-channel leaks in web application development. In: ACM Conference on Computer and Communications Security, pp. 595\u2013606 (2010)","DOI":"10.1145\/1866307.1866374"},{"key":"36_CR41","unstructured":"Zhu, Y., Bettati, R.: Anonymity vs. information leakage in anonymity systems. In: ICDCS, pp. 514\u2013524 (2005)"}],"container-title":["Journal of Cryptographic Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s13389-012-0036-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s13389-012-0036-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s13389-012-0036-0","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,3]],"date-time":"2019-07-03T00:19:33Z","timestamp":1562113173000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s13389-012-0036-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,8,21]]},"references-count":41,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2012,10]]}},"alternative-id":["36"],"URL":"https:\/\/doi.org\/10.1007\/s13389-012-0036-0","relation":{},"ISSN":["2190-8508","2190-8516"],"issn-type":[{"value":"2190-8508","type":"print"},{"value":"2190-8516","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,8,21]]}}}