{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T07:01:25Z","timestamp":1782975685615,"version":"3.54.5"},"reference-count":124,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00106","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"1-20","source":"Crossref","is-referenced-by-count":0,"title":["Keytar: Practical Keystroke Timing Attacks and Input Reconstruction"],"prefix":"10.1109","author":[{"given":"Mufan","family":"Qiu","sequence":"first","affiliation":[{"name":"University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lihsuan","family":"Chuang","sequence":"additional","affiliation":[{"name":"University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dohhyun","family":"Kim","sequence":"additional","affiliation":[{"name":"University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Huaizhi","family":"Qu","sequence":"additional","affiliation":[{"name":"University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianlong","family":"Chen","sequence":"additional","affiliation":[{"name":"University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew","family":"Kwong","sequence":"additional","affiliation":[{"name":"University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Timing analysis of keystrokes and timing attacks on $\\{\\text{SSH}\\}$","volume-title":"10th USENIX Security Symposium (USENIX Security 01)","author":"Song","year":"2001"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180436"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301311"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-014-0264-7"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1609956.1609959"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2789168.2790122"},{"key":"ref7","first-page":"1","article-title":"Compromising electromagnetic emanations of wired and wireless keyboards","volume-title":"USENIX security symposium","volume":"8","author":"Vuagnoux","year":"2009"},{"key":"ref8","first-page":"1145","article-title":"\\{USB\\} snooping made easy: crosstalk leakage attacks on \\{USB\\} hubs","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Su","year":"2017"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359816"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475539"},{"key":"ref11","first-page":"859","article-title":"Hidden reality: Caution, your hand gesture inputs in the immersive virtual world are visible to all!","volume-title":"32nd USENIX security symposium (USENIX Security 23)","author":"Gopal","year":"2023"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2017.8228624"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA47549.2020.00020"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2018.8647385"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3494986"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833773"},{"key":"ref17","first-page":"99","article-title":"A survey on acoustic side channel attacks on key-boards","volume-title":"International Conference on Information and Communications Security","author":"Taheritajar","year":"2024"},{"key":"ref18","first-page":"23","article-title":"Peeping tom in the neighborhood: Keystroke eavesdropping on multi-user systems","volume-title":"USENIX Security Symposium","volume":"20","author":"Zhang","year":"2009"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.19"},{"key":"ref20","first-page":"849","article-title":"Loophole: Timing attacks on shared event loops in chrome","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Vila","year":"2017"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1998.674829"},{"key":"ref22","first-page":"64","article-title":"Keyboards and covert channels","volume-title":"USENIX Security Symposium","volume":"15","author":"Shah","year":"2006"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.28"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.20"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3023872"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38980-1_25"},{"key":"ref27","first-page":"2725","article-title":"Can virtual reality protect users from keystroke inference attacks?","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Yang","year":"2024"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_11"},{"key":"ref29","first-page":"897","article-title":"Cache template attacks: Automating attacks on inclusive Last-Level caches","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Gruss"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23027"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653687"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40667-1_14"},{"key":"ref33","first-page":"565","article-title":"Drama: exploiting dram addressing for cross-cpu attacks","volume-title":"Proceedings of the 25th USENIX Conference on Security Symposium, ser. SEC\u201916","author":"Pessl","year":"2016"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22424-9_5"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.32"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833692"},{"key":"ref37","first-page":"645","article-title":"Lord of the ring (s): Side channel attacks on the \\{CPU\\}\\{OnChip\\} ring interconnect are practical","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Paccagnella","year":"2021"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.19"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833692"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00082"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3564625.3567979"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2944624"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2366231.2337173"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-017-0025-y"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-51479-1_2"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23221"},{"key":"ref47","first-page":"3921","article-title":"\\{HubBub\\}:\\{Contention-Based\\}\\{Side-Channel\\} attacks on \\{USB\\} hubs","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","author":"Wan","year":"2025"},{"key":"ref48","first-page":"6807","article-title":"\\{Side-Channel\\} attacks on optane persistent memory","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Liu","year":"2023"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00059"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690242"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174220"},{"key":"ref52","first-page":"959","article-title":"What are you searching for? a remote keylogging attack on search engine autocomplete","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Monaco"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICECET52533.2021.9698782"},{"key":"ref54","article-title":"What was your prompt? A remote keylogging attack on AI assistants","author":"Weiss","year":"2024","journal-title":"arXiv preprint"},{"key":"ref55","first-page":"3367","article-title":"What was your prompt? a remote keylogging attack on \\{AI\\} assistants","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Weiss","year":"2024"},{"key":"ref56","volume-title":"Llama: Open and efficient foundation language models","author":"Touvron","year":"2023"},{"key":"ref57","author":"Touvron","year":"2023","journal-title":"Llama 2: Open foundation and fine-tuned chat models"},{"key":"ref58","volume-title":"The llama 3 herd of models","author":"Grattafiori","year":"2024"},{"key":"ref59","volume-title":"Qwen technical report","author":"Bai","year":"2023"},{"key":"ref60","volume-title":"Qwen2 technical report","author":"Yang","year":"2024"},{"key":"ref61","volume-title":"Qwen3 technical report","author":"Yang","year":"2025"},{"key":"ref62","author":"Radford","year":"2018","journal-title":"Improving language understanding by generative pre-training"},{"issue":"8","key":"ref63","first-page":"9","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"Radford","year":"2019","journal-title":"OpenAI blog"},{"key":"ref64","volume-title":"Language models are few-shot learners","author":"Brown","year":"2020"},{"key":"ref65","article-title":"Gpt-4 technical report","volume-title":"OpenAI","author":"Achiam","year":"2024"},{"key":"ref66","article-title":"Openai o1 system card","volume-title":"OpenAI","year":"2024"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3744746"},{"key":"ref68","article-title":"A survey on large language models: Applications, challenges, limitations, and practical usage","author":"Hadi","year":"2023","journal-title":"Authorea Preprints"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1016\/j.lindif.2023.102274"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3747588"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1016\/j.aiopen.2022.10.001"},{"key":"ref73","volume-title":"Exploring the limits of transfer learning with a unified text-totext transformer","author":"Raffel","year":"2023"},{"key":"ref74","article-title":"2 olmo 2 furious","author":"OLMo","year":"2024","journal-title":"arXiv preprint"},{"key":"ref75","article-title":"Improving large language model fine-tuning for solving math problems","author":"Liu","year":"2023","journal-title":"arXiv preprint"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.3390\/s22114157"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1017\/S1351324921000322"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.3390\/info13020083"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.3390\/info10040150"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73242-3_10"},{"key":"ref81","article-title":"Deepseekmath: Pushing the limits of mathematical reasoning in open language models","author":"Shao","year":"2024","journal-title":"arXiv preprint"},{"key":"ref82","first-page":"719","article-title":"FLUSH+RELOAD: A high resolution, low noise, 13 cache SideChannel attack","volume-title":"23rd USENIX Security Symposium (USENIX Security 14)","author":"Yarom"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.43"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484816"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.230253"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO56248.2022.00053"},{"key":"ref87","first-page":"1967","article-title":"RELOAD+REFRESH: Abusing cache replacement policies to perform stealthy cache attacks","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Briongos"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690313"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00004"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/3620665.3640403"},{"key":"ref91","first-page":"7107","article-title":"Checking passwords on leaky computers: A side channel analysis of chrome\u2019s password leak detect protocol","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Kwong","year":"2023"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00046"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-009-9049-y"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"ref95","first-page":"973","article-title":"Meltdown: Reading kernel memory from user space","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Lipp"},{"key":"ref96","first-page":"971","article-title":"Branch history injection: On the effectiveness of hardware mitigations against Cross-Privilege spectre-v2 attacks","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Barberis"},{"key":"ref97","doi-asserted-by":"crossref","DOI":"10.1109\/MDAT.2024.3352537","article-title":"Spectre returns! speculation attacks using the return stack buffer","volume-title":"12th USENIX Workshop on Offensive Technologies (WOOT 18)","author":"Koruyeh"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00089"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00087"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00064"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00098"},{"key":"ref102","article-title":"Flop: Breaking the apple m3 cpu via false load output predictions","author":"Kim","year":"2025","journal-title":"USENIX Security"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354252"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813708"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00042"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.64"},{"key":"ref107","article-title":"Larger language models do in-context learning differently","author":"Wei","year":"2023","journal-title":"arXiv preprint"},{"key":"ref108","first-page":"959","article-title":"What are you searching for? a remote keylogging attack on search engine autocomplete","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Monaco","year":"2019"},{"issue":"140","key":"ref109","first-page":"1","article-title":"Exploring the limits of transfer learning with a unified text-to-text transformer","volume":"21","author":"Raffel","year":"2020","journal-title":"Journal of machine learning research"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/3589335.3641257"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553380"},{"key":"ref112","first-page":"991","article-title":"Foreshadow: Extracting the keys to the intel SGX kingdom with transient Out-of-Order execution","volume-title":"27 th USENIX Security Symposium (USENIX Security 18)","author":"Bulck"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/3676641.3716020"},{"key":"ref114","first-page":"7321","article-title":"BunnyHop: Exploiting the instruction prefetcher","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Zhang"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1145\/3649329.3656525"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00063"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560688"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00027"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1145\/3623652.3623669"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/3649329.3656213"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833711"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2017.36"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507747"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2024.3377891"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573555.pdf?arnumber=11573555","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:31:11Z","timestamp":1782970271000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573555\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":124,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00106","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}