{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,21]],"date-time":"2026-10-21T15:48:05Z","timestamp":1792597685158,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006374","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272265"],"award-info":[{"award-number":["62272265"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690361","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"452-466","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Internet's Invisible Enemy: Detecting and Measuring Web Cache Poisoning in the Wild"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-0132-1764","authenticated-orcid":false,"given":"Yuejia","family":"Liang","sequence":"first","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7511-1117","authenticated-orcid":false,"given":"Jianjun","family":"Chen","sequence":"additional","affiliation":[{"name":"Tsinghua University & Zhongguancun Laboratory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-4053-7967","authenticated-orcid":false,"given":"Run","family":"Guo","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-6334-1675","authenticated-orcid":false,"given":"Kaiwen","family":"Shen","sequence":"additional","affiliation":[{"name":"Tsinghua University & Clouditera Inc, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-0306-6691","authenticated-orcid":false,"given":"Hui","family":"Jiang","sequence":"additional","affiliation":[{"name":"Tsinghua University & Baidu Inc, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-9208-3197","authenticated-orcid":false,"given":"Man","family":"Hou","sequence":"additional","affiliation":[{"name":"Zhongguancun Laboratory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-2425-4781","authenticated-orcid":false,"given":"Yue","family":"Yu","sequence":"additional","affiliation":[{"name":"Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0083-733X","authenticated-orcid":false,"given":"Haixin","family":"Duan","sequence":"additional","affiliation":[{"name":"Tsinghua University & Quancheng Laboratory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978394"},{"key":"e_1_3_2_1_2_1","volume-title":"https:\/\/github.com\/defparam\/smuggler","author":"Custodio Evan","year":"2020","unstructured":"Evan Custodio. Smuggler. https:\/\/github.com\/defparam\/smuggler, 2020."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504755"},{"key":"e_1_3_2_1_4_1","first-page":"2017","article-title":"Web cache deception attack","author":"Gil Omer","year":"2017","unstructured":"Omer Gil. Web cache deception attack. Black Hat USA, 2017, 2017.","journal-title":"Black Hat USA"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/EDOC52215.2021.00028"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2018.00011"},{"key":"e_1_3_2_1_7_1","first-page":"6185","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Guo Run","year":"2023","unstructured":"Run Guo, Jianjun Chen, Yihang Wang, Keran Mu, Baojun Liu, Xiang Li, Chao Zhang, Haixin Duan, and JianpingWu. Temporal {CDN-Convex} lens: A {CDNAssisted} practical pulsing {DDoS} attack. In 32nd USENIX Security Symposium (USENIX Security 23), pages 6185--6202, 2023."},{"key":"e_1_3_2_1_8_1","volume-title":"NDSS","author":"Guo Run","year":"2020","unstructured":"Run Guo,Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen, and Ying Liu. Cdn judo: Breaking the cdn dos protection with itself. In NDSS, 2020."},{"key":"e_1_3_2_1_9_1","unstructured":"Hackmanit. Web cache vulnerability scanner. https:\/\/github.com\/Hackmanit\/W eb-Cache-Vulnerability-Scanner."},{"key":"e_1_3_2_1_10_1","unstructured":"Apache http server project. caching guide. https:\/\/httpd.apache.org\/docs\/2.4\/ca ching.html."},{"key":"e_1_3_2_1_11_1","first-page":"1061","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Jabiyev Bahruz","year":"2022","unstructured":"Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi, Tommaso Innocenti, Kaan Onarlioglu, and Engin Kirda. {FRAMESHIFTER}:fram security implications of {HTTP\/2-to-HTTP\/1} conversion anomalies. In 31st USENIX Security Symposium (USENIX Security 22), pages 1061--1075, 2022."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485384"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2019.8888058"},{"key":"e_1_3_2_1_14_1","unstructured":"James Kettle. Http\/2: The sequel is always worse. https:\/\/portswigger.net\/resear ch\/http2."},{"key":"e_1_3_2_1_15_1","unstructured":"James Kettle. Parem miner. https:\/\/github.com\/PortSwigger\/param-miner."},{"key":"e_1_3_2_1_16_1","unstructured":"James Kettle. Practical web cache poisoning: Redefining ?unexploitable?. https: \/\/portswigger.net\/research\/practical-web-cache-poisoning."},{"key":"e_1_3_2_1_17_1","unstructured":"James Kettle. Web cache entanglement: Novel pathways to poisoning. https: \/\/portswigger.net\/research\/web-cache-entanglement."},{"key":"e_1_3_2_1_18_1","volume-title":"Black Hat USA","author":"Kettle James","year":"2019","unstructured":"James Kettle. Http desync attacks: Smashing into the cell next door. Black Hat USA, 2019."},{"key":"e_1_3_2_1_19_1","volume-title":"Web Cache Poisoning Attacks and Related Topics, Sanctum whitepaper","author":"Klein Amid","year":"2004","unstructured":"Amid Klein. Divide and conquer. HTTP Response Splitting, Web Cache Poisoning Attacks and Related Topics, Sanctum whitepaper, 2004."},{"key":"e_1_3_2_1_20_1","first-page":"8","article-title":"Http request smuggling in 2020--new variants, new defenses and new challenges","author":"Klein Amit","year":"2020","unstructured":"Amit Klein. Http request smuggling in 2020--new variants, new defenses and new challenges. Black Hat Briefings USA, 8, 2020.","journal-title":"Black Hat Briefings USA"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00022"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.12"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186091"},{"key":"e_1_3_2_1_24_1","first-page":"665","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Mirheidari Seyed Ali","year":"2020","unstructured":"Seyed Ali Mirheidari, Sajjad Arshad, Kaan Onarlioglu, Bruno Crispo, Engin Kirda, and William Robertson. Cached and confused: Web cache deception in the wild. In 29th USENIX Security Symposium (USENIX Security 20), pages 665--682, 2020."},{"key":"e_1_3_2_1_25_1","first-page":"179","volume-title":"Web cache deception escalates! In 31st USENIX Security Symposium (USENIX Security 22)","author":"Mirheidari Seyed Ali","year":"2022","unstructured":"Seyed Ali Mirheidari, Matteo Golinelli, Kaan Onarlioglu, Engin Kirda, and Bruno Crispo. Web cache deception escalates! In 31st USENIX Security Symposium (USENIX Security 22), pages 179--196, 2022."},{"key":"e_1_3_2_1_26_1","unstructured":"Nginx. Nginx content caching. https:\/\/docs.nginx.com\/nginx\/admin-guide\/content-cache\/content-caching\/."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297280.3297526"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354215"},{"key":"e_1_3_2_1_29_1","volume-title":"Exploiting http request smuggling vulnerabilities. https:\/\/portswig ger.net\/web-security\/request-smuggling\/exploiting","year":"2020","unstructured":"PortSwigger. Exploiting http request smuggling vulnerabilities. https:\/\/portswig ger.net\/web-security\/request-smuggling\/exploiting, 2020."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/4236.656085"},{"key":"e_1_3_2_1_31_1","volume-title":"Simhash: Hash-based similarity detection","author":"Sadowski Caitlin","year":"2007","unstructured":"Caitlin Sadowski and Greg Levin. Simhash: Hash-based similarity detection, 2007."},{"key":"e_1_3_2_1_32_1","unstructured":"Squid. Squid: Optimising web delivery. http:\/\/www.squid-cache.org\/."},{"key":"e_1_3_2_1_33_1","unstructured":"Varnish. Varnish http cache. https:\/\/varnish-cache.org\/."},{"key":"e_1_3_2_1_34_1","unstructured":"w3techs. Cloudflare vs. akamai vs. fastly usage statistics. https:\/\/w3techs.com\/technologies\/comparison\/cn-akamai cn-cloudflare cn-fastly."},{"key":"e_1_3_2_1_35_1","first-page":"1185","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Wang Chuhan","year":"2022","unstructured":"Chuhan Wang, Kaiwen Shen, Minglei Guo, Yuxuan Zhao, Mingming Zhang, Jianjun Chen, Baojun Liu, Xiaofeng Zheng, Haixin Duan, Yanzhong Lin, et al. A large-scale and longitudinal measurement study of {DKIM} deployment. In 31st USENIX Security Symposium (USENIX Security 22), pages 1185--1201, 2022."},{"key":"e_1_3_2_1_36_1","unstructured":"WordPress. Wp super cache. https:\/\/wordpress.org\/plugins\/wp-super-cache\/."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690361","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690361","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:04:26Z","timestamp":1755842666000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690361"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":36,"alternative-id":["10.1145\/3658644.3690361","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690361","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}