Continuous authentication has been proposed as a possible approach for passive and
seamless user authentication, using sensor data comprising biometric, behavioral, and …

The drive to create thinner, lighter, and more energy efficient devices has resulted in modern
SoCs being forced to balance a delicate tradeoff between power consumption, heat …

When browsing the web, none of us want sites to infer which other sites we may have visited
before or are logged in to. However, attacker-controlled sites may infer this state through …

The privacy threats of online tracking have garnered considerable attention in recent years
from researchers and practitioners. This has resulted in users becoming more …

A web visit typically consists of the browser rendering a dynamically generated response
that is specifically tailored to the user. This generation of responses based on the currently …

To perform successful remote timing attacks, an adversary typically collects a series of
network timing measurements and subsequently performs statistical analysis to reveal a …

Service workers are a powerful technology supported by all major modern browsers that can
improve users' browsing experience by offering capabilities similar to those of native …

We examine the threat to individuals' privacy based on the feasibility of reidentifying users
through distinctive profiles of their browsing history visible to websites and third parties. This …

Cross-Site Leaks (XS-Leaks) describe a client-side bug that allows an attacker to collect
side-channel information from a cross-origin HTTP resource. They are a significant threat to …

In a Cross-Origin State Inference (COSI) attack, an attacker convinces a victim into visiting
an attack web page, which leverages the cross-origin interaction features of the victim's web …