digital8
Second Lieutenant
Joined: 29 Sep 2005
Posts: 1002
|
 Posted: Thu Sep 29, 2005 4:10 pm Post subject: Session Fixation Vulnerability in Web-based Applications |
 |
|
Many web-based applications employ some kind of session management to create a user-friendly environment. Sessions are stored on server and associated with respective users by session identifiers (IDs). To prevent attackers hijacking users' identities by obtaining session IDs, web servers are employing techniques for protecting session IDs from three classes of attacks: interception, prediction and brute-force attacks. This paper reveals a fourth class of attacks against session IDs: session fixation attacks.
Click Here to download this white paper |
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
