Automated Black-Box Detection of Side Channel Vulnerabilities in Web Applications Peter Chapman David Evans University of Virginia