4 papers · 1 filter
Web Cache Overflow: Exploiting Imprecise Keys for Cache Degradation and Beyond
Matteo Golinelli, Kaan Onarlioglu, Bruno Crispo
Web caches support the scalability needs of contemporary web applications by storing frequently accessed objects closer to clients. Web caches are conceptually associative arrays,…
Koney: A Cyber Deception Orchestration Framework for Kubernetes
Mario Kahlhofer, Matteo Golinelli, Stefan Rass
System operators responsible for protecting software applications remain hesitant to implement cyber deception technology, including methods that place traps to catch attackers, de…
Hidden Web Caches Discovery
Matteo Golinelli, Bruno Crispo
Web caches play a crucial role in web performance and scalability. However, detecting cached responses is challenging when web servers do not reliably communicate the cache status…
The Nonce-nce of Web Security: an Investigation of CSP Nonces Reuse
Matteo Golinelli, Francesco Bonomi, Bruno Crispo
Content Security Policy (CSP) is an effective security mechanism that prevents the exploitation of Cross-Site Scripting (XSS) vulnerabilities on websites by specifying the sources…