Question

Which session management technique can reduce security attacks?

Answer 1

Answer:

The session ID regeneration is mandatory to prevent session fixation attacks, where an attacker sets the session ID on the victim user's web browser instead of gathering the victim's session ID, as in most of the other session-based attacks, and independently of using HTTP or HTTPS.

Explanation:

Answer 2

Answer:

Session ID regeneration can be used to reduce security attacks and also always use your credentials only on HTTPS websites.

Explanation:

Session Attacks

The primary goal of session attacks is to steal the credentails of the use or to hijack the system and use the identity of the victim to do illegal activities.

The intention of the hacker is to have full access to the session, giving them the same permissions as the actual authorized user. At the same time, while in the session, the hacker can modify information in the server that will make it easy to return.

Session attacks can be of different types. Some of the important ones are as follows:

• Man-in-the-middle/man-in-the-browser attacks
• Session sniffing
• Cross-site script attack

Methods to be saved from session attacks

• Always give your credentials only on  HTTPS ceritifed websites.
• Properly log out of sessions especially if you are using someone else system or using a cyber cafe computer.
• Install a good antivirus.

• Keep your browsers updated.

#SPJ3