A Survey on Session Management Vulnerabilities in Web Application

Internet security is a branch of computing and acts as a secure channel to exchange data by reducing the risk and attacks. The usage of sophisticated web based applications is increasing as it provides much functionality to the user. Web applications play major role in different sectors including education, banking, health-care, online services, etc. As its importance in society increases the session vulnerabilities are also found in web applications. Attackers take the advantage of poorly configured websites to hijack user's sessions and take control over their identity. An important piece of information is stored on the session state and hence represents a valuable target for the attackers. Therefore session management is an important web application security risk. One of the reasons behind successful takeover of session is poor programming techniques. Another reason is due to the way the server and the user authenticate themselves initially.