Whitepaper discussing cross site request timing attacks. This was originally presented at Black Hat 2007 and Defcon 15.
You can download it from the following link: https://packetstormsecurity.com/files/download/58461/dc-15-meer_and_slaviero-WP.pdf
Source: https://packetstormsecurity.com/files/58461/dc-15-meer_and_slaviero-WP.pdf.html