Comparative Analysis of Session Hijacking on Different Operating Systems

Authors

  • Mohit Raj Department of Computer Science & Engineering, Thapar University, Patiala
  • Maninder Singh

Keywords:

operating systems, session hijacking, web server

Abstract

 Session hijacking is the act of taking control of a user session after successfully obtaining or generating an authentication session id. This paper presents the comparative analysis of session hijacking on different operating systems. The experiment has been conducted on a LAN system. First, session id is captured, then hijacking is performed. The two methods for capturing the session id are used that consist of passive sniffing and active sniffing. The first method is very common, easy to conduct, difficult to detect, and less effective. The second method is very effective but can be detected. The aim of sniffing is to get session id of active connection. This paper also discusses the limitation and dependency of session hijacking attack. Keywords: operating systems, session hijacking, web server 

Downloads

Published

2012-08-09

Issue

Vol. 3 No. 2 (2012)

Section

Review Articles

License

Declaration and Copyright Transfer Form

(to be completed by authors)

 

I/ We, the undersigned author(s) of the submitted manuscript, hereby declare, that the above manuscript which is submitted for publication in the STM Journals(s), is not published already in part or whole (except in the form of abstract) in any journal or magazine for private or public circulation, and, is not under consideration of publication elsewhere.

·         I/We will not withdraw the manuscript after 1 week of submission as I have read the Author Guidelines and will adhere to the guidelines.

·         I/We Author(s ) have niether given nor will give this manuscript elsewhere for publishing after submitting in STM Journal(s).

·         I/ We have read the original version of the manuscript and am/ are responsible for the thought contents embodied in it. The work dealt in the manuscript is my/ our own, and my/ our individual contribution to this work is significant enough to qualify for authorship.

·          I/We also agree to the authorship of the article in the following order:

Author’s name                                    

 

1. ________________

2. ________________

3. ________________

4. _______________

 

We  Author(s) tick this box and would request you to consider it as our signature as we agree to the terms of this Copyright Notice, which will apply to this submission if and when it is published by this journal.