Session Donation
Alek Amrani details session Donation Alek Amrani It's easier to give away than it is to take.
Summary
Architecture and Background
Session Donation Alek Amrani It's easier to give away than it is to take. Apply that theory to Session Hijacking, and enter Session Donation.
Vulnerability Analysis
Session Donation is a computer session attack that attempts to gain information by taking session hijacking in an entirely new direction. Session Donation is an interesting new spin on an old attack that is much harder to prevent than it's predecessor, and equally as dangerous.
Exploitation and Demonstrations
Alek Amrani is currently an Information Security Programmer for the Information Security Office at the University of Texas at Austin where he is also pursuing a degree in Computer Science. He's interested in all areas of security from physical to computational, and is also the vice-president of the Longhorn LockPicking Club.
Remediation and Defensive Strategies
Generally described by his friends as 'paranoid', Alek enjoys introducing himself as people he's not, looking over his shoulder, taking different routes home, and creating new passwords in his spare time. For copies of the slides and additional materials please see the DEF CON 17 Archive here:
Related talks
Main Stage·12 min
Ricky Lawshae
Ricky Lawshae explores picking electronic locks using tcp sequence prediction at DEF CON 17, examining electronic-locks and practical defenses.
Main Stage·46 min
Sho Ho
Sho Ho explores foe feeding controversial news to censored countries at DEF CON 17, examining electronic-locks and practical defenses.
Main Stage·22 min
Pratap Prabhu · Yingbo Song
Pratap Prabhu and Yingbo Song explores smashing the stack with hydra at DEF CON 17, examining electronic-locks and practical defenses.