Session hijacking is a common form of attack against websites. Hackers using this attack are able to take advantage of poorly configured websites to literally hijack a user’s session and take over their identity. In this tip, we take a brief look at a how session hijacking attack works, how a tool called Firesheep automates the attack, the risk this poses to the midsized business and how to prevent session hijacking to protect your organization and users.

Read the full article: Defending against Firesheep: How to prevent a session hijacking attack

Published in SearchMidmarketSecurity on 11/19/10