Web Session Hijacking

Web Session Hijacking is a type of cyber attack in which an unauthorized entity misappropriates a valid session token or identifier to gain illicit access to a web-based application or service, thereby impersonating an authenticated user.

Publications

3.6K

Citations

218

Authors

Institutions

Publications per year

2017–2026

Variants

Session Hijacking

Parents

Web Security

Children

Authentication Token TheftBrowser Session ProtectionConcurrent Session MonitoringCookie Attribute HardeningCookie Replay AttacksCredential Theft PreventionMalware-based Session HijackingMan-in-the-browser AttacksMan-in-the-middle AttacksMulti-factor Authentication Bypass

Publications

Phishing environments, techniques, and countermeasures: A survey

Ahmed Aleroud, Lina Zhou · Computers & Security · 2017 · 310 citations

Computing, Computer Science, Cybersecurity +10

A survey of phishing attacks: Their types, vectors and technical approaches

Kang Leng Chiew, Kelvin S. C. Yong, Choon Lin Tan · Expert Systems with Applications · 2018 · 295 citations

Computing, Computer Science, Cybersecurity +12

An empirical study of privacy-violating information flows in JavaScript web applications

Dongseok Jang, Ranjit Jhala, Sorin Lerner et al. · 2010 · 172 citations

Computing, Computer Science, Cybersecurity +16

Tutorial and critical analysis of phishing websites methods

Rami Mustafa A. Mohammad, Fadi Thabtah · Computer Science Review · 2015 · 161 citations · Full text

Computing, Computer Science, Cybersecurity +14

Dynamic pharming attacks and locked same-origin policies for web browsers

Chris Karlof, Umesh Shankar, J. D. Tygar et al. · 2007 · 127 citations

Computing, Computer Science, Cybersecurity +17

1–5 of 73

Authors

218

SC
Stefano Calzavara
Ca' Foscari University of Venice, Italy
4 publications · 107 citations
4
h-index
MB
Michele Bugliesi
Ca' Foscari University of Venice, Italy
4 publications · 107 citations
4
h-index
CJ
Collin Jackson
Stanford University, United States
4 publications · 299 citations
4
h-index
DB
Dan Boneh
Stanford University, United States
3 publications · 256 citations
3
h-index
AB
Adam Barth
Stanford University, United States
3 publications · 185 citations
3
h-index

1–5 of 218

Institutions

1–8 of 99

Venues

Computers & Security
4 publications · 453 citations
4
h-index
USENIX Security Symposium
Conference · 2 publications · 69 citations
2
h-index
Expert Systems with Applications
2 publications · 343 citations
2
h-index
ACM Transactions on the Web
TWEB · 2 publications · 82 citations
2
h-index
Journal of Computer Security
2 publications · 57 citations
2
h-index

1–5