Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What kind of cache-related attacks exists in modern Web world? The only one I'm aware of is Cache Poisoning. Is there anything else I should be worrying about?

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

There is a lot going on in the infrastructure that you shouldn't be worried about, so long as you keep these systems up to date. Browsers, proxies and other systems have gotten really smart over the years and if you asked this same question 10 years ago I would have given you a completely different answer.

DNS Cache Poisoning is a very serious vulnerability, but so many of these have been found that its really difficult to preform this attack on a modern DNS server.

DNS Cache poisoning has a very similar impact to ARP table poisoning. At the end of the day a table is just a type of cache.

Did you know that web browsers will encrypt cached copies of all HTTPS content? That is really nice. HTTP proxies are unable to cache this content so that is a good thing as long as you use https. However the cache used by HTTP proxies can be poisoned using HTTP Response Splitting which can be a serious problem.

share|improve this answer
add comment

SEO poisoning is a kind of cache attack and is pretty new, too.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.