没有合适的资源?快使用搜索试试~ 我知道了~
Hacking Web Applications Using Cookie Poisoning
需积分: 3 2 下载量 15 浏览量
2009-07-21
01:49:50
上传
评论
收藏 138KB PDF 举报
温馨提示
试读
10页
In this paper, we explain why session management (and session management security) is a complex task (which is why it is usually left for commercial products). We describe how the tokens are generated for two commercial application engines. We then analyze the strength of each mechanism, explain its weakness, and demonstrate how such weakness can be exploited to execute an impersonation/privacy breach attack. We discuss the feasibility of the attack. Finally, we recommend an approach to session management which separates the security from the functionality – the latter is carried out by application engines, while the former should be provided by a dedicated application security product.
资源推荐
资源评论
资源评论
chotsai
- 粉丝: 0
- 资源: 2
上传资源 快速赚钱
- 我的内容管理 展开
- 我的资源 快来上传第一个资源
- 我的收益 登录查看自己的收益
- 我的积分 登录查看自己的积分
- 我的C币 登录后查看C币余额
- 我的收藏
- 我的下载
- 下载帮助
安全验证
文档复制为VIP权益,开通VIP直接复制
信息提交成功