Cache poisoning

Last updated

Cache poisoning refers to a computer security vulnerability where invalid entries can be placed into a cache, which are then assumed to be valid when later used. [1] Two common varieties are DNS cache poisoning [2] and ARP cache poisoning. Web cache poisoning involves the poisoning of web caches [3] (which has led to security issues in programming languages, including all Python versions at the time in 2021, and expedited security updates [4] ). Attacks on other, more specific, caches also exist. [5] [6] [7]

References

  1. ↑ "CAPEC-141: Cache Poisoning". CAPEC. Archived from the original on 2021-01-22. Retrieved 2021-01-22.
  2. ↑ Wu, Hao; Dang, Xianglei; Wang, Lidong; He, Longtao (2016). "Information fusion-based method for distributed domain name system cache poisoning attack detection and identification" . IET Information Security. 10 (1): 37–44. doi:10.1049/iet-ifs.2014.0386. ISSN   1751-8717. S2CID   45091791.
  3. ↑ Nguyen, Hoai Viet; Iacono, Luigi Lo; Federrath, Hannes (6 November 2019). "Your Cache Has Fallen: Cache-Poisoned Denial-of-Service Attack". Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. pp. 1915–1936. doi:10.1145/3319535.3354215. ISBN   978-1-4503-6747-9. S2CID   207958900.
  4. ↑ "CVE - CVE-2021-23336". cve.mitre.org. Retrieved 2023-10-13.
  5. ↑ Hensler, Christopher; Tague, Patrick (15 May 2019). "Using bluetooth low energy spoofing to dispute device details". Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks. pp. 340–342. doi:10.1145/3317549.3326321. ISBN   978-1-4503-6726-4. S2CID   160010874.
  6. ↑ Daswani, Neil; Garcia-Molina, Hector (2004). "Pong-cache poisoning in GUESS". Proceedings of the 11th ACM conference on Computer and communications security. pp. 98–109. doi:10.1145/1030083.1030099. ISBN   1-58113-961-6. S2CID   416914.
  7. ↑ Wang, Dong; Dong, Wei Yu (April 2019). "Attacking Intel UEFI by Using Cache Poisoning". Journal of Physics: Conference Series. 1187 (4) 042072. Bibcode:2019JPhCS1187d2072W. doi: 10.1088/1742-6596/1187/4/042072 .
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.