Seminar Papers Pharmacy Presentations technical IEEE ppts topics abstract on Session Lock Protocol- Securing Web sessions against Eavesdropping (Seminar Paper Presentations)
Abstract: Typical web sessions can be hijacked easily by a network eavesdropper in attacks that have come to be designated “side jacking.” The rise of ubiquitous wireless networks, often unprotected at the transport layer, has significantly aggravated this problem. While SSL can protect against eavesdropping, its usability disadvantages often make it unsuitable when the data is not considered highly confidential. Most web-based email services, for example, use SSL only on their login page and are thus vulnerable to side jacking. We propose Session Lock, a simple approach to securing web sessions against eavesdropping without extending the use of SSL. Session Lock is easily implemented by web developers using only JavaScript and simple server-side logic. Its performance impact is negligible, and all major web browsers are supported. Interestingly, it is particularly easy to implement on single-page AJAX web applications, e.g. Gmail or Yahoo mail, with approximately 200 lines of JavaScript and 60 lines of server-side verification code.
Abstract: Typical web sessions can be hijacked easily by a network eavesdropper in attacks that have come to be designated “side jacking.” The rise of ubiquitous wireless networks, often unprotected at the transport layer, has significantly aggravated this problem. While SSL can protect against eavesdropping, its usability disadvantages often make it unsuitable when the data is not considered highly confidential. Most web-based email services, for example, use SSL only on their login page and are thus vulnerable to side jacking. We propose Session Lock, a simple approach to securing web sessions against eavesdropping without extending the use of SSL. Session Lock is easily implemented by web developers using only JavaScript and simple server-side logic. Its performance impact is negligible, and all major web browsers are supported. Interestingly, it is particularly easy to implement on single-page AJAX web applications, e.g. Gmail or Yahoo mail, with approximately 200 lines of JavaScript and 60 lines of server-side verification code.
Download Full Seminar Paper Presentation : Click Here