翻訳と辞書 |
Session fixation : ウィキペディア英語版 | Session fixation
In computer network security, session fixation attacks attempt to exploit the vulnerability of a system which allows one person to fixate (find or set) another person's session identifier. Most session fixation attacks are web based, and most rely on session identifiers being accepted from URLs (query string) or POST data. == Attack scenarios == Alice has an account at the bank http://unsafe.example.com/ . Unfortunately, Alice is not very security savvy. Mallory intends to target Alice's money from her bank. Alice has a reasonable level of trust in Mallory, and will visit links Mallory sends her.
抄文引用元・出典: フリー百科事典『 ウィキペディア(Wikipedia)』 ■ウィキペディアで「Session fixation」の詳細全文を読む
スポンサード リンク
翻訳と辞書 : 翻訳のためのインターネットリソース |
Copyright(C) kotoba.ne.jp 1997-2016. All Rights Reserved.
|
|