WebApp Sec mailing list archives

RE: How can i protect against session hijacking?

From: "Martin O'Neal" <martin.oneal () corsaire com>
Date: Thu, 2 Apr 2009 17:44:18 +0100

One possibility is the WAF tying the session 
cookie to the SSL session...


But in the scenario outlined, the attackers mobile code could easily be
running in the same browser session...

Martin...

Current thread:

RE: How can i protect against session hijacking? Chris Grove (Apr 01)
- <Possible follow-ups>
- RE: How can i protect against session hijacking? Martin O'Neal (Apr 01)
  - Re: How can i protect against session hijacking? Justin Clarke (Apr 02)
- RE: How can i protect against session hijacking? Martin O'Neal (Apr 02)
- Re: How can i protect against session hijacking? Adam Todorski (Apr 02)
- RE: How can i protect against session hijacking? Martin O'Neal (Apr 02)
- RE: How can i protect against session hijacking? Debasis Mohanty (Apr 02)
  - Message not available
    - Re: How can i protect against session hijacking? David Scholefield (Apr 03)
- RE: How can i protect against session hijacking? Debasis Mohanty (Apr 02)
- RE: How can i protect against session hijacking? Debasis Mohanty (Apr 02)
- RE: How can i protect against session hijacking? Debasis Mohanty (Apr 02)
  - Re: How can i protect against session hijacking? AF (Apr 03)
    - Re: How can i protect against session hijacking? David Scholefield (Apr 03)
    - RE: How can i protect against session hijacking? Debasis Mohanty (Apr 03)

(Thread continues...)