• DOI:10.1109/SP.2016.49
Corpus ID: 5123300

The Cracked Cookie Jar: HTTP Cookie Hijacking and the Exposure of Private Information

@article{Sivakorn2016TheCC,
  title={The Cracked Cookie Jar: HTTP Cookie Hijacking and the Exposure of Private Information},
  author={Suphannee Sivakorn and Iasonas Polakis and A. Keromytis},
  journal={2016 IEEE Symposium on Security and Privacy (SP)},
  year={2016},
  pages={724-742}
}

Suphannee Sivakorn, Iasonas Polakis, A. Keromytis

Published 2016

Computer Science

2016 IEEE Symposium on Security and Privacy (SP)

The widespread demand for online privacy, also fueled by widely-publicized demonstrations of session hijacking attacks against popular websites, has spearheaded the increasing deployment of HTTPS. However, many websites still avoid ubiquitous encryption due to performance or compatibility issues. The prevailing approach in these cases is to force critical functionality and sensitive data access over encrypted connections, while allowing more innocuous functionality to be accessed over HTTP. In… CONTINUE READING

View on IEEE

cs.columbia.edu

Save to Library

Create Alert

Cite

Launch Research Feed