Discuss about the Literature Review on Http Session Hijacking.
HTTP session hijacking is a form of hacking into the system for extracting the information regarding the computer web surfing session (Sum Keng Chung et al., 2014). The hackers would exploit the cookie session of the system for gaining the access to services and information in the computer system. Another term, ‘theft of magic cookie’ has been given to the HTTP session hijacking (Yogesh Mundada et al., 2014). The HTTP cookies that is used for maintaining the particular web server and login session of the users can be hacked into for extracting the information from it. The use of intermediary computers would be used by the attacker for accessing the saved information in form of cookies.
The following assignment has been made for forming the literature review on the topic of HTTP session hijacking form the available literatures. It would exclude the technical details and process included for the HTTP session hijacking. The different attacks on the computer session and its vitality would be highlighted in the following report. The available literatures are prone to provide a description on the increased HTTP session hijacking and their impact on user’s personal data. However, the final section of the review would provide the summary of the complete literature on HTTP session hijacking.
The HTTP session hijacking has been the most prominent issue for the users and it has affected the operations of the user sessions (Weaver et al., 2013). The web session would have to be controlled for protecting the occurrence of attack. The use of SALT (sequence number alteration by the use of logical transformation) would be useful for protecting and defending the HTTP session hijacking (Nishanth & Babu, 2014). Different types of methods should be used for protecting the HTTP session hijacking for different users.
The selection of any research topic is based on the interest of the individual doing the research. It is important for making sure that the topic selected for the research purpose must be collateral and there should be ample amount of previous literature available on the research topic (Raymond Lukanta, 2014). There are some principles that must be followed for selecting any topic for research and performing research on it. They are:
The HTTP session hijacking would be more formidable for attacking the progress of user web server utilization (Bursztein et al., 2012). The secure web server login would be helpful for dealing with the HTTP session hijacking. The goal of the secure login would be to deal with the hacking of user’s session along with personal data and information (Hanmanthu et al., 2015). The discussion of the report would be based on the analysis of the available literature and articles on the HTTP session hijacking. The discussion would be ordered on the basis of its importance and proof of statements.
The analysis of the preventive measures is conceptual and it has been done by analyzing the various facts and data collected from different sources. The generation of session ID, encryption and comparison of cookies would be helpful for forming the security of wireless networks. A strong and encrypted session would help in formation of prevention models (Manivannan & Sathiyamoorthy, 2014). The sections headings that would be used are the title of the 3 articles that would be used for forming the literature review.
The client authorisation process for the modern web surfing structure can also be used for protecting the occurrence of HTTP session hijacking (Mundada et al., 2014). The New apparatus works the treats sets into two for testing. One set is the login treats and the second set is the non-sign in cookies. Newton tests the treats sets from top and the second treat set from the base in a rotating pattern. The Newton calculation stops where there are no more treat sets left to test. Newton decides the confirmation treats from the client sign in and client log out example
The use of automatic and robust protection for cookie based sessions would be helpful for providing the client side protection. The solution has been named as the one time cookies and it can be used for preventing the attacks on user’s information (Dacosta et al., 2011). The session of the user would be kept and stored secretly without any expensive synchronization requirement. The implementation of O. T. P. would be plugged in on the platform of word pres.
The issue of HTTP session hijacking could be dealt by improving the security of web application’s session management (De Ryck,P et al., 2014). The solution of the problem is based on the light weight mechanism. An unknown key value is infused between the server and the program and it keeps an attacker from assuming control over the client’s session, as the key can’t be transmitted or acquired easily. The security properties are observed to be upgraded and raise the level of security for HTTP organizations.
The components like HTTP session, flags, browser model, and feather weight Firefox would be helpful for protecting the cookie based session (Bugliesi et al., 2014). The session is the most vital sort of assault in systems. These assaults are propelled by fake get to focuses. The fundamental target of this paper to recognize the fake get to focuses with the utilization of server hubs in the system. We likewise propose in giving security for IP satirizing utilizing scrambled calculation.
Another method that can be used for protecting the IP spoofing and session hijacking is by using the sensor nodes (Abhishek Kumar Bharathi, 2014). The specialists have concentrated the broken verification assaults and the session’s administration assaults in awesome profundity and clarified the procedure of the interruptions that occur. The preventive measures have additionally been proposed by the analysts in the review which is a choice of existing preventive measures accessible today.
Hence, it can be said that all the literatures available are based on the verification of designs and adaptability of new tools for the prevention of HTTP session hijacking. It would result in extraction of personal information from the user web session. According to Thiago Rocha (2014), the web surfing store the information in forms of cookies and the hackers get into the webs server system for accessing the information and use it for their personal use.
The research paper has been able to assist in making and distinctly analyzing the preventive measures for HTTP session hijacking for the operations of the business organizations and human use. The study has been done by concentrating on the development of the preventive measures for HTTP session hijacking and support ease of web server processing. The assignment has been done by focusing on the issues faced by the users due to the issue of HTTP session hijacking on the web service storage. The study had shown the critical evaluation of the issues of HTTP session hijacking. The research done in this assignment would be helpful for providing an overview on the preventive measures for HTTP session hijacking.
Conclusion
The review of the various literatures would result in finding the implementing methods for the preventions of HTTP session hijacking. The use of preventive methods plays a crucial role for considering all the safety measures, achieve the security considerations, supported the foundation of solutions for preventing HTTP session hijacking. The use of different source routed packets for IP configuration would be helpful for supporting the network participation and encouragement of IP packets to pass through B’s machine.
The study would be helpful for the development of an idea of the preventive measures for HTTP session hijacking and its implications in the development of commercial operations. The research has been done in conceptual methodology for the study purpose. The conceptual analysis of the HTTP session hijacking was based on the available studies and articles. The critical analysis on the topic has yielded the benefits and drawbacks of the commercial usage of preventions for HTTP session hijacking. The structure for the research includes a basic introduction for defining the topic of study, data collection methods, evaluation of the available literature, forming a thesis of the topic, and concluding the topic.
References
Abhishek Kumar Bharathi, m. c. (21014). prevention of session hijacking and IP spoofing with sensor nodes and cryptographic approach. International Journal of Sciences: Basic and Applied Research (IJSBAR).
Bugliesi, M., Calzavara,S., Focardi, R.,andKhan,W.(2014) Automatic and RobustClient-Side Protection for Cookie-Based Sessions,pp:161-168,Pdf.,retrieved on Dec 9th 2016
Bursztein,E.,Soman,C.Boneh,D. Mitchell,J.C.(2012) Session Juggler: Secure WebLogin From an Untrusted Terminal Using Session Hijacking,978(1) 321-330 Pdf. retrieved on Dec 8th 2016
Dacosta, I., Chakradeo, S., Ahamad, M., & Traynor, P. (2011). One-time cookies: Preventing session hijacking attacks with disposable credentials.
De Ryck,P., Desmet,L., Piessens,F., Joosen,W.(2014) Improving the Security ofSession Management in Web Applications,pp:1-13,Pdf. retrieved on Dec 8th 2016
Hanmanthu, B., Ram , R., & Niranjan , P. (2015). Decision tree classification. SQL Injection Attack Prevention Based on Decision tree classification, 1-5.
Manivannan, S. &Sathiyamoorthy, E. (2014). A Prevention Model for Session Hijack Attacks in Wireless Networks Using Strong and Encrypted Session ID.Cybernetics And Information Technologies, 14(3).
Mundada, Y., Feamster, N., Krishnamurthy, B., Guha, S., & Levin, D. (2014). Half-Baked Cookies: Client Authentication on the Modern Web.
Nagpal, B., Chauhan, N. Singh, Nanhay., Shatma,P.( 2014) Preventive Measures for Securing Web Applications using Broken Authentication and Session Management Attacks: a Study, 24(81) 1-3, Discovery, retrieved on Dec 9th 2016
Nishanth, N. & Babu, S. (2014). Sequence Number Alteration by Logical Transformation (SALT): A Novel Method for Defending Session Hijacking Attack in Mobile Ad hoc Network. International Journal Of Computer And Communication Engineering, 3(5), 338-342.
Raymond Lukanta, Y. A. (2014). Scanning tool for session management vulnerabilities. A Vulnerability Scanning Tool for session management vulnerabilities, 6.
Shashank, K., Shah, P., Bhavsar, K., & Gandhi, S. (2013). Frontline Techniques to Prevent Web Application Vulnerability. International Journal Of Advanced Research In Computer Science And Electronics Engineering (IJARCSEE), 2(2), 2-5.
Sum Keng Chung, Ow Chee Yee, Manmeet Mahinderjit Singh, Rohail Hassan. (2014). Preventing session hijacking. SQL Injections Attack attack and session hijacking on E-learning systems, 5.
Thiago S. Rocha, E. S. (2014). ETSS detector tool. ETSSDetector: a tool to automatically detect CrossSite scripting vulnerabilities.
Weaver, N., Kreibich, C., Dam,M., PaxsonV. (2013)Here Be Web Proxies,PP: 1-10,Pdf., retrieved on Dec 9th 2016
Yogesh Mundada, Y. Feamster,N., Krishnamurthy,B, Guha,S. Levin,D.(2014) Half-Baked Cookies: Client Authentication on the Modern Web, pp1-6 pdf.,retrieved on Dec 9th 2016
Essay Writing Service Features
Our Experience
No matter how complex your assignment is, we can find the right professional for your specific task. Contact Essay is an essay writing company that hires only the smartest minds to help you with your projects. Our expertise allows us to provide students with high-quality academic writing, editing & proofreading services.
Free Features
Free revision policy
$10Free bibliography & reference
$8Free title page
$8Free formatting
$8How Our Essay Writing Service Works
First, you will need to complete an order form. It's not difficult but, in case there is anything you find not to be clear, you may always call us so that we can guide you through it. On the order form, you will need to include some basic information concerning your order: subject, topic, number of pages, etc. We also encourage our clients to upload any relevant information or sources that will help.
Complete the order form
Once we have all the information and instructions that we need, we select the most suitable writer for your assignment. While everything seems to be clear, the writer, who has complete knowledge of the subject, may need clarification from you. It is at that point that you would receive a call or email from us.
Writer’s assignment
As soon as the writer has finished, it will be delivered both to the website and to your email address so that you will not miss it. If your deadline is close at hand, we will place a call to you to make sure that you receive the paper on time.
Completing the order and download