Anzeige
Erschienen in:
2021 | OriginalPaper | Buchkapitel
Loop Holes in Cookies and Their Technical Solutions for Web Developers
verfasst von : Talwinder Singh, Bilal Ahmad Mantoo
Erschienen in: Recent Innovations in Computing
Verlag: Springer Singapore
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
Session hijacking is the term used to describe the theft of session cookies, i.e., sniff the cookies and use those to impersonate the end user. A cookie is a small-sized text file sent by the Web server to the user’s browser and is store at the client side. When a user visits a Web site first time, the Web server generates a fresh cookie. The Web site uses that cookie to track the movements of an authorized user. Main threats of cookies are session fixation attack, cross-site scripting (XXS) attack, session sniffing attack, cookies cloning attack, and cookies controlling malware. The hacker sniffs the network traffic for cookies and uses same to impersonate the user. With performing session hijacking attack, the attacker acts as actual user on Web. In this paper, we are going to discuss some of the technique that helps in optimizing the cookie attacks in Web applications.