Automated black-box detection of side-channel vulnerabilities in web applications