Identifying Weak Session Tokens Using Entropy - Tradecraft Security Weekly #15
from Tradecraft Security Weekly (Video)
Session management in web applications is extremely important in regards to securing user credentials and integrity within the application. Sometimes session tokens can be predicted provided the overall randomness is weak. If this is possible a remote attacker may be able to compromise the session of an authenticated user. In this episode of Tradecraft Security Weekly both Beau Bullock (@dafthack) and Mike Felch (@ustayready) discuss the issues associated with creating session tokens with weak entropy.
Embed this episode
No transcript yet.
Frequently asked questions
How long is this episode of Tradecraft Security Weekly (Video)?
This episode is 13 minutes long.
When was this Tradecraft Security Weekly (Video) episode published?
This episode was published on August 18, 2017.
Can I download this Tradecraft Security Weekly (Video) episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.