Tagged:
timing-attacks2 posts
-
Side-Channel Attacks on LLM APIs: What Response Timing and Token Counts Reveal
How LLM API metadata — token counts, timing, and streaming patterns — leaks system prompt structure and model configuration to adversaries.
-
Cross-Tenant Contamination in LLM APIs: When Other Users' Context Leaks Into Your Session
Multi-tenant LLM deployments — shared inference infrastructure, KV cache reuse, batched requests — create subtle cross-tenant data exposure risks that differ from classical API security vulnerabilities. This post maps the threat surface unique to shared AI inference.