Mobile Session Fixation Attack in Micropayment Systems

Autor: F. Tommasi, C. Catalano, M. Fornaro, I. Taurino

Publikováno v: IEEE Access, Vol 7, Pp 41576-41583 (2019)

The rapid spread of micropayment systems, together with some peculiarity of their typical use, have attracted computer criminals and dishonest companies aiming at exploiting the systems’ weaknesses to steal from users both personal data and money.

Externí odkaz: https://doaj.org/article/1db12caa1498419aba5958d2bdf61d42

Prevention of session hijacking using token and session id reset approach

Autor: Talwinder Singh, Meenakshi

Publikováno v: International Journal of Information Technology. 12:781-788

Session hijacking is the term used to describe the theft of user’s cookies and make clone of that cookies. The hacker uses packet sniffer to capture traffic between user and the server to steal the cookies which contain session information. The sam

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::6b24ad6b4d276d563feae7db81d404f7
https://doi.org/10.1007/s41870-020-00486-w

Sound and Static Analysis of Session Fixation Vulnerabilities in PHP Web Applications

Autor: Nadjib Badache, Abdelouahid Derhab, Abdelraouf Ouadjaout, Abdelouahab Amira

Publikováno v: CODASPY
CODASPY, Mar 2017, Scottsdale, Arizona, United States. Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy, 2017, ⟨10.1145/3029806.3029838⟩

International audience; Web applications use authentication mechanisms to provide user-friendly content to users. However, some dangerous techniques like session fixation attacks target these mechanisms, by making the legitimate user use a session id

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::156b48064f972f8d12ae2df7c6f49884
https://hal.sorbonne-universite.fr/hal-01522368

BRB dashboard: A web-based statistical dashboard

Autor: Hardik Patel, Sharvari Patil, Siddharth Mahajan, Mitesh Parekh

Publikováno v: 2017 International Conference on Innovations in Information, Embedded and Communication Systems (ICIIECS).

Dashboards allow managers in keep track of various activities and developments in their departments. There are various existing enterprise resource planning systems that are standardized that can be used by trading sales industry. However there are v

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::7e67b3f644a9c5c334f25271724896f3
https://doi.org/10.1109/iciiecs.2017.8276076

An Analytical Study of Web Application Session Management Mechanisms and HTTP Session Hijacking Attacks

Autor: Annette Tetmeyer, Shellie Wedman, Hossein Saiedian

Publikováno v: Information Security Journal: A Global Perspective. 22:55-67

The HTTP protocol is designed for stateless transactions, but many Web applications require a session to be maintained between a Web browser and a server creating a stateful environment. Each Web application decides how its session is managed and nee

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::71c4ee92299d008576f736c8a39f643f
https://doi.org/10.1080/19393555.2013.783952