Skip to main navigation Skip to search Skip to main content

CookieMonster: Automated session hijacking archival and analysis

  • Joshua J. Pauli
  • , Patrick H. Engebretson
  • , Michael J. Ham
  • , Marccharles J. Zautke

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

We introduce a process-driven experiment named "CookieMonster" that can be ran against any cookie granting (i.e. session identification generation) application to test for strength of the cookie generation algorithm. The Cookie Monster processes are applicable to any operating system, web server, and web application as long as session identifiers are granted to requesting client machines. Our goal is to decipher how likely session hijacking attacks may be successful strictly because of weak session identifier generation by the web application. These processes and necessary infrastructure setup can be followed for future generations of web application and web server products because of the universal approach we created. Setup for the experiment includes a web server running a web application that grants session identifiers (cookies), an attack machine running our rapid request software (Bockscar) and a database for archival and analysis of the cookies.

Original languageEnglish (US)
Title of host publicationProceedings - 2011 8th International Conference on Information Technology
Subtitle of host publicationNew Generations, ITNG 2011
PublisherIEEE Computer Society
Pages403-407
Number of pages5
ISBN (Print)9780769543673
DOIs
StatePublished - 2011
Externally publishedYes

Publication series

NameProceedings - 2011 8th International Conference on Information Technology: New Generations, ITNG 2011

Keywords

  • archiving
  • cookies
  • hijacking
  • sessions

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Information Systems

Fingerprint

Dive into the research topics of 'CookieMonster: Automated session hijacking archival and analysis'. Together they form a unique fingerprint.

Cite this