Session Security in Web Applications
summary
Explains how web application sessions work and why session-related flaws are highly common (e.g., Session Fixation, Session Hijacking, CSRF). Shows live examples of these vulnerabilities, gives remediation recommendations, and lists tools useful for testing session security so attendees can start testing their own projects.
AI-written summary · about
chapters (10)
- 0:00Web session security
- 7:49PSN hack history
- 9:13Web session testing
- 12:26Session hijacking attacks
- 18:47Session hijacking defenses
- 23:44Session fixation mechanism
- 28:06Session fixation protection
- 31:21CSRF and social engineering
- 37:03Defenses for devs and users
- 41:00Security testing importance
related talks
35mWeb Applications: Common Security Issues
45mWeb application security - A tale of security, betrayal and revenge
50mSecure Authentication and Session Management
52mSecure Authentication and Session Management in Java EE
01h 04mWeb Security And You
52mSecure Authentication and Session Management in Java EE
30mWeb Security Engineering - Protect all layers of your project
46mHow to perform security testing of a Web application