{"id":"https://openalex.org/W2032258689","doi":"https://doi.org/10.1145/2659651.2659718","title":"Automated Session Fixation Vulnerability Detection in Web Applications using the Set-Cookie HTTP response header in cookies","display_name":"Automated Session Fixation Vulnerability Detection in Web Applications using the Set-Cookie HTTP response header in cookies","publication_year":2014,"publication_date":"2014-09-09","ids":{"openalex":"https://openalex.org/W2032258689","doi":"https://doi.org/10.1145/2659651.2659718","mag":"2032258689"},"language":"en","primary_location":{"id":"doi:10.1145/2659651.2659718","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2659651.2659718","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 7th International Conference on Security of Information and Networks","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101992657","display_name":"Rahul Kumar","orcid":"https://orcid.org/0009-0006-9020-9095"},"institutions":[{"id":"https://openalex.org/I1331500379","display_name":"Centre for Development of Advanced Computing","ror":"https://ror.org/022abst40","country_code":"IN","type":"facility","lineage":["https://openalex.org/I1331500379","https://openalex.org/I4210121746"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Rahul Kumar","raw_affiliation_strings":["Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115","Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115","institution_ids":["https://openalex.org/I1331500379"]},{"raw_affiliation_string":"Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115#TAB#","institution_ids":["https://openalex.org/I1331500379"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049044989","display_name":"K Indraveni","orcid":null},"institutions":[{"id":"https://openalex.org/I1331500379","display_name":"Centre for Development of Advanced Computing","ror":"https://ror.org/022abst40","country_code":"IN","type":"facility","lineage":["https://openalex.org/I1331500379","https://openalex.org/I4210121746"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Indraveni K","raw_affiliation_strings":["Senior Technical officer, C-DAC Hyderabad, +91 - 40 - 23150115","Senior Technical officer, C-DAC Hyderabad, +91 - 40 - 23150115#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Senior Technical officer, C-DAC Hyderabad, +91 - 40 - 23150115","institution_ids":["https://openalex.org/I1331500379"]},{"raw_affiliation_string":"Senior Technical officer, C-DAC Hyderabad, +91 - 40 - 23150115#TAB#","institution_ids":["https://openalex.org/I1331500379"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048230192","display_name":"Aakash Kumar Goel","orcid":null},"institutions":[{"id":"https://openalex.org/I1331500379","display_name":"Centre for Development of Advanced Computing","ror":"https://ror.org/022abst40","country_code":"IN","type":"facility","lineage":["https://openalex.org/I1331500379","https://openalex.org/I4210121746"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Aakash Kumar Goel","raw_affiliation_strings":["Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115","Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115","institution_ids":["https://openalex.org/I1331500379"]},{"raw_affiliation_string":"Project Engineer, C-DAC Hyderabad, +91 - 40 - 23150115#TAB#","institution_ids":["https://openalex.org/I1331500379"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1331500379"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.12562109,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"351","last_page":"354"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9830999970436096,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9739999771118164,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.8253849744796753},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7344040274620056},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.6803877353668213},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.575503408908844},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5360095500946045},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.46026021242141724},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4336380660533905},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3465959429740906},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.18806752562522888}],"concepts":[{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.8253849744796753},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7344040274620056},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.6803877353668213},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.575503408908844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5360095500946045},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.46026021242141724},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4336380660533905},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3465959429740906},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.18806752562522888}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2659651.2659718","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2659651.2659718","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 7th International Conference on Security of Information and Networks","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W2096409818","https://openalex.org/W2470937392"],"related_works":["https://openalex.org/W2171597999","https://openalex.org/W2189136227","https://openalex.org/W1866537546","https://openalex.org/W630850086","https://openalex.org/W3200508093","https://openalex.org/W4372053344","https://openalex.org/W3193978431","https://openalex.org/W2519240373","https://openalex.org/W2379752180","https://openalex.org/W1496096987"],"abstract_inverted_index":{"By":[0],"now,":[1],"Internet":[2],"has":[3],"attained":[4],"supremacy":[5],"over":[6],"physical":[7],"mediums":[8],"to":[9,13,49,132],"access":[10],"data":[11,76],"related":[12],"banking,":[14],"healthcare,":[15],"and":[16,23,79,94,105],"other":[17],"critical/non-critical":[18],"information":[19],"through":[20],"web-based":[21],"interfaces":[22,37],"systems.":[24],"It":[25],"is":[26,59,77,131],"assumed":[27],"that":[28],"these":[29,36,82],"systems":[30],"are":[31],"secure,":[32],"but":[33],"many":[34],"of":[35,108,118,128,136,139],"may":[38],"have":[39],"severe":[40,65],"security":[41,66],"issues":[42],"associated":[43],"with":[44],"them,":[45],"which":[46,72],"allow":[47],"attacks":[48],"succeed":[50],"in":[51,68],"gathering":[52],"critical":[53],"data.":[54],"An":[55],"insecure":[56],"session":[57,87,119,123,141],"management":[58,88,120,142],"one":[60],"such":[61,140],"commonly":[62],"found,":[63],"yet":[64],"flaw":[67],"the":[69,74,103,109,115,137],"web":[70,83,110],"applications":[71],"affect":[73],"way":[75],"managed":[78],"controlled":[80],"on":[81],"interfaces.":[84],"Implementing":[85],"secure":[86],"requires":[89],"an":[90,99],"in-depth,":[91],"comprehensive":[92],"approach":[93],"should":[95],"be":[96],"introduced":[97],"as":[98],"inbuilt":[100],"module":[101],"during":[102],"design":[104],"development":[106],"lifecycle":[107],"applications.":[111],"This":[112],"paper":[113,130],"discusses":[114],"special":[116],"case":[117],"vulnerability,":[121],"i.e.,":[122],"fixation.":[124],"The":[125],"main":[126],"objective":[127],"this":[129],"suggest":[133],"optimum":[134],"automation":[135],"detection":[138],"vulnerabilities.":[143]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}