Session Hijacking

Question 1

What is Session Management?

Answer 1

A fundamental security component that enables web applications to identify a user

Question 2

What are Cookies?

Answer 2

Allow web applications to retain information about the user

Question 3

What are Session Cookies?

Answer 3

These reside in memory

When your done and close out the browser, the cookie is then deleted

Question 4

What are Persistent Cookies?

Answer 4

These cookies are stored in the browser cache until they’re deleted by the user when you do the clearing your cookies or when they pass a defined expiration date.

Question 5

What is Session Hijacking?

Answer 5

A type of spoofing attack where the host is disconnected and replaced by the attacker

Question 6

What is Session Prediction?

Answer 6

An attacker attempts to predict the session token to hijack the session

Question 7

What is Cookie Poisoning?

Answer 7

Modifying the contents of a cookie to be sent to a clients browser and exploits the vulnerabilities in an application

Question 8

How do you counter Cookie Poisoning?

Answer 8

you want to make sure you validate the input of your web app to account for any tampered-with cookies.