New Attack Leverages HTTP/2 for Effective Remote Timing Side-Channel Leaks

guest · Jul 31, 2020

New Attack Leverages HTTP/2 for Effective Remote Timing Side-Channel Leaks
July 31, 2020
https://thehackernews.com/2020/07/http2-timing-side-channel-attacks.html

Security researchers have outlined a new technique that renders a remote timing-based side-channel attack more effective regardless of the network congestion between the adversary and the target server.

The new method, called Timeless Timing Attacks (TTAs) by researchers from DistriNet Research Group and New York University Abu Dhabi, instead leverages multiplexing of network protocols and concurrent execution by applications, thus making the attacks immune to network conditions.

"These concurrency-based timing attacks infer a relative timing difference by analyzing the order in which responses are returned, and thus do not rely on any absolute timing information," the researchers said.
Click to expand...

Using HTTP/2's Request Multiplexing to Reduce Jitter
Unlike the typical timing-based attacks, wherein the execution times are measured independently and sequentially, the latest technique attempts to extract information from the order and the relative timing difference between two concurrently executed requests without relying on any timing information.
Click to expand...

"Timeless Timing Attacks: Exploiting Concurrency to Leak Secrets over Remote Connections"
(PDF): https://tom.vg/papers/timeless-timing-attack_usenix2020.pdf

We show how these attacks result in a 100-fold improvement over typical timing attacks performed over the Internet, and can accurately detect timing differences as small as 100ns, similar to attacks launched on a local system.
We describe how these timing attacks can be successfully deployed against HTTP/2 webservers, Tor onion services, and EAP-pwd, a popular Wi-Fi authentication method.
Click to expand...

Log in or Sign up

New Attack Leverages HTTP/2 for Effective Remote Timing Side-Channel Leaks

guest Guest

Log in or Sign up

New Attack Leverages HTTP/2 for Effective Remote Timing Side-Channel Leaks

guest Guest

Useful Searches