Logo
Unionpedia
Communication
Get it on Google Play
New! Download Unionpedia on your Android™ device!
Free
Faster access than browser!
 

Session fixation

Index Session fixation

In computer network security, session fixation attacks attempt to exploit the vulnerability of a system that allows one person to fixate (find or set) another person's session identifier. [1]

21 relations: Alice and Bob, AOL, Cross-site request forgery, Defense in depth (computing), Exploit (computer security), HTTP cookie, HTTP referer, HTTPS, Internet café, IP address, Network address translation, Phishing, Privilege escalation, Query string, Security through obscurity, Session ID, Session poisoning, Spoofing attack, Transport Layer Security, URL, Webmail.

Alice and Bob

Alice and Bob are fictional characters commonly used as placeholder names in cryptology, as well as science and engineering literature.

New!!: Session fixation and Alice and Bob · See more »

AOL

AOL (formerly a company known as AOL Inc., originally known as America Online, and stylized as Aol.) is a web portal and online service provider based in New York.

New!!: Session fixation and AOL · See more »

Cross-site request forgery

Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts.

New!!: Session fixation and Cross-site request forgery · See more »

Defense in depth (computing)

Defense in depth (also known as Castle Approach) is an information assurance (IA) concept in which multiple layers of security controls (defense) are placed throughout an information technology (IT) system.

New!!: Session fixation and Defense in depth (computing) · See more »

Exploit (computer security)

An exploit (from the English verb to exploit, meaning "to use something to one’s own advantage") is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerized).

New!!: Session fixation and Exploit (computer security) · See more »

HTTP cookie

An HTTP cookie (also called web cookie, Internet cookie, browser cookie, or simply cookie) is a small piece of data sent from a website and stored on the user's computer by the user's web browser while the user is browsing.

New!!: Session fixation and HTTP cookie · See more »

HTTP referer

The HTTP (originally a misspelling of referrer) is an HTTP header field that identifies the address of the webpage (i.e. the URI or IRI) that linked to the resource being requested.

New!!: Session fixation and HTTP referer · See more »

HTTPS

HTTP Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP) for secure communication over a computer network, and is widely used on the Internet.

New!!: Session fixation and HTTPS · See more »

Internet café

An Internet café, also known as a cybercafé, is a place which provides Internet access to the public, usually for a fee.

New!!: Session fixation and Internet café · See more »

IP address

An Internet Protocol address (IP address) is a numerical label assigned to each device connected to a computer network that uses the Internet Protocol for communication.

New!!: Session fixation and IP address · See more »

Network address translation

Network address translation (NAT) is a method of remapping one IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device.

New!!: Session fixation and Network address translation · See more »

Phishing

Phishing is the fraudulent attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.

New!!: Session fixation and Phishing · See more »

Privilege escalation

Privilege escalation is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access to resources that are normally protected from an application or user.

New!!: Session fixation and Privilege escalation · See more »

Query string

On the World Wide Web, a query string is the part of a uniform resource locator (URL) containing data that does not fit conveniently into a hierarchical path structure.

New!!: Session fixation and Query string · See more »

Security through obscurity

In security engineering, security through obscurity (or security by obscurity) is the reliance on the secrecy of the design or implementation as the main method of providing security for a system or component of a system.

New!!: Session fixation and Security through obscurity · See more »

Session ID

In computer science, a session identifier, session ID or session token is a piece of data that is used in network communications (often over HTTP) to identify a session, a series of related message exchanges.

New!!: Session fixation and Session ID · See more »

Session poisoning

Session poisoning (also referred to as "session data pollution" and "session modification") is a method to exploit insufficient input validation within a server application.

New!!: Session fixation and Session poisoning · See more »

Spoofing attack

In the context of network security, a spoofing attack is a situation in which a person or program successfully masquerades as another by falsifying data, to gain an illegitimate advantage.

New!!: Session fixation and Spoofing attack · See more »

Transport Layer Security

Transport Layer Security (TLS) – and its predecessor, Secure Sockets Layer (SSL), which is now deprecated by the Internet Engineering Task Force (IETF) – are cryptographic protocols that provide communications security over a computer network.

New!!: Session fixation and Transport Layer Security · See more »

URL

A Uniform Resource Locator (URL), colloquially termed a web address, is a reference to a web resource that specifies its location on a computer network and a mechanism for retrieving it.

New!!: Session fixation and URL · See more »

Webmail

Webmail (or web-based email) is any email client implemented as a web application running on a web server.

New!!: Session fixation and Webmail · See more »

Redirects here:

Session fixiation.

References

[1] https://en.wikipedia.org/wiki/Session_fixation

OutgoingIncoming
Hey! We are on Facebook now! »