Exposing private information by timing web applications
Proceedings of the 16th international conference on World Wide Web (2007) - Comments
doi: 10.1145/1242572.1242656 

Andrew Bortz, Dan Boneh