Mobile Session Fixation Attack in Micropayment Systems

Autor: F. Tommasi, C. Catalano, M. Fornaro, I. Taurino

Publikováno v: IEEE Access, Vol 7, Pp 41576-41583 (2019)

The rapid spread of micropayment systems, together with some peculiarity of their typical use, have attracted computer criminals and dishonest companies aiming at exploiting the systems’ weaknesses to steal from users both personal data and money.

Externí odkaz: https://doaj.org/article/1db12caa1498419aba5958d2bdf61d42

Mobile Session Fixation Attack in Micropayment Systems

Autor: Ivan Taurino, M. Fornaro, C. Catalano, Franco Tommasi

Publikováno v: IEEE Access, Vol 7, Pp 41576-41583 (2019)

The rapid spread of micropayment systems, together with some peculiarity of their typical use, have attracted computer criminals and dishonest companies aiming at exploiting the systems’ weaknesses to steal from users both personal data and money.

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::4d76d755be5756d4e1120e2bc639a9af
https://ieeexplore.ieee.org/document/8673952/

Sound and Static Analysis of Session Fixation Vulnerabilities in PHP Web Applications

Autor: Nadjib Badache, Abdelouahid Derhab, Abdelraouf Ouadjaout, Abdelouahab Amira

Publikováno v: CODASPY
CODASPY, Mar 2017, Scottsdale, Arizona, United States. Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy, 2017, ⟨10.1145/3029806.3029838⟩

International audience; Web applications use authentication mechanisms to provide user-friendly content to users. However, some dangerous techniques like session fixation attacks target these mechanisms, by making the legitimate user use a session id

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::156b48064f972f8d12ae2df7c6f49884
https://hal.sorbonne-universite.fr/hal-01522368

Serene: Self-Reliant Client-Side Protection against Session Fixation

Autor: Frank Piessens, Philippe De Ryck, Nick Nikiforakis, Wouter Joosen, Lieven Desmet

Publikováno v: Distributed Applications and Interoperable Systems ISBN: 9783642308222
DAIS

The web is the most wide-spread and de facto distributed platform, with a plethora of valuable applications and services. Building stateful services on the web requires a session mechanism that keeps track of server-side session state, such as authen

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::949311a54080c90b43be15f99d3fd121
https://doi.org/10.1007/978-3-642-30823-9_5

Automated detection of session fixation vulnerabilities

Autor: Kenji Kono, Yusuke Takamatsu, Yuji Kosuga

Publikováno v: WWW

Session fixation is a technique for obtaining the visitor's session identifier (SID) by forcing the visitor to use the SID supplied by the attacker. The attacker who obtains the victim's SID can masquerade as the visitor. In this paper, we propose a

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::d9db4759db62b140c06778515a354d6f
https://doi.org/10.1145/1772690.1772869