论文信息 - Session management vulnerabilities in today's web

Session management vulnerabilities in today's web

Many cyberattacks exploit session management vulnerabilities that allow attackers to be recognized as valid website users. This article describes Web application design flaws that could be exploited for session management attacks and discusses these flaws' current prevalence.

Corrado Aaron Visaggio

[1] Michael D. Ernst,et al. Automatic creation of SQL Injection and cross-site scripting attacks , 2009, 2009 IEEE 31st International Conference on Software Engineering.

[2] Mitja Kolšek,et al. Session Fixation Vulnerability in Web-based Applications , 2002 .

[3] Dafydd Stuttard,et al. The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws , 2007 .

[4] Sid Stamm,et al. Certified Lies: Detecting and Defeating Government Interception Attacks Against SSL , 2010 .