A session is a period of time linked to a user, which is initiated when he/she arrives at a web application and it ends when his/her browser is closed or after a certain time of inactivity. Attackers can hijack a user's session by exploiting session management vulnerabilities by means of session fixation and cross-site request forgery attacks.
Very often, session IDs are not only identification tokens, but also authenticators. This means that upon login, users are authenticated based on their credentials (e.g., usernames/passwords or digital certificates) and issued session IDs that will effectively serve as temporary static passwords for accessing their sessions. This makes session IDs a very appealing target for attackers. In many cases, an attacker who manages to obtain a valid ID of user’s session can use it to directly enter that session – often without arising user’s suspicion. A secure session management must be implemented in the development phase of web applications because it is the responsibility of the web application, and not the underlying web server.
Threat modeling is a systematic process that is used to identify threats and vulnerabilities in software and has become popular technique to help system designers think about the security threats that their system might face.
In this paper we design the threat modeling for session’s ID threat by using SeaMonster security modeling software, and then propose a secure session management that avoids the vulnerabilities. The proposed secure session management is designed to give trust authentication between the client and the server to avoid session hijacing attack by using both: server session’s ID and MAC address of the client.Visual Studio. Net 2008 is used in implementing the proposed system
The steel industry sector is witnessing an obvious growth in most worldwide nations and gulf countries. We wish that Iraq would be one of these superiors that go on along field to develop the construction industry in Iraq. Hence we need to notify that the government attention should be equivalent to the importance of steel industry and other industries would depend on this one, it should be presented the full support to the general sector, which is represented by ministry of industry and its institutions throughout the suitable legislation and facilities for the private companies are already into that, and they might record progress in this field. this study aims to use scrap steel as raw materials in manufacturing iron steel such war remai
... Show More
The importance of the accounting profession in creating data and accounting information for economic resources and their sources and changes therein , through the effectiveness of this information and the degree of suitability and providing accurate and timely manner and in a form that makes it able to rationalize decisions and performance reporting , and there are several elements and behaviors control how the effectiveness of these reports and these behaviors work ethic that govern the work of management accountant when preparing performance reports , which are the ethics of the work of professional control principles and rules of accounting , legal, such as objectivity and reliability , neutrality and timeliness that must be a
... Show More
The intellectual property of digital documents has been protected by using many methods of digital watermarking. Digital documents have been so much of advantages over print documents. Digital documents are less expensive and easy to store, transport, and searched compared to traditional print documents. But it has its owner limitation too. A simple image editor can be used to modify and make a forged document. Digital documents can be tampered easily. In order to utilize the whole benefits of digital document, these limitations have to overcome these limitations by embedding some text, logo sequence that identifies the owner of the document..
In this research LSB technique has been used
... Show More
The research aims at introducing accountability creative and the factors influencing or helping to Do in Iraqi companies, was launched two assumptions first that he was effect with significance to a number of factors in the direction of departments in Iraqi companies to practice creative accounting , were selected (9) factors believed to researchers it's most influential, and second that there importance of significance for a number of ways or methods to prevent or combat creative accounting , and the purpose of testing hypotheses have been designed questionnaire was distributed to a sample of 48 individual practitioners accountable in Iraqi companies and auditors in charge of auditing the accounts of those companies , after anal
... Show MoreThe Research Aims To Clarify The Role Of Knowledge Innovation On The Administrative Process Represented by Managing Strategic Momentum, The Research Problem Focuses on Administrative leader Interest In And Implementation Of The Innovation Element Of Knowledge In The Organization By " Managing Strategic Momentum" As Well As The Focus By Management About The Innovators And Makers Of Knowledge And Strategic Planners In The Design And Formulation Of Strategic. Research does Contribute In Solving Part Of The Organizational Problems Of Vision, Innovation And Their Impact On The Momentum Management To Determine The Extent On Which The Procedures Of The Assessed Companies And Plan To Regulate Innovation Under The Momentu
... Show More
Lattakia city faces many problems related to the mismanagement of solid waste, as the disposal process is limited to the random Al-Bassa landfill without treatment. Therefore, solid waste management poses a special challenge to decision-makers by choosing the appropriate tool that supports strategic decisions in choosing municipal solid waste treatment methods and evaluating their management systems. As the human is primarily responsible for the formation of waste, this study aims to measure the degree of environmental awareness in the Lattakia Governorate from the point of view of the research sample members and to discuss the effect of the studied variables (place of residence, educational level, gender, age, and professional status) o
... Show More
(1)
Abstract
The study aims to identify the extent to which the applied colleges at the University of Technology and Applied Sciences meet the comprehensive quality standards in light of the national education strategy for the 2040 Vision in the Sultanate of Oman. To do this, the researchers used the descriptive approach. They used a questionnaire as a tool for data collection that was applied to (237) administrators, academics, and support functions. The study found that the extent to which the applied colleges at the University of Technology and Applied Sciences meet the comprehensive quality standards in the light of the National Education Strategy 2040 in the Sultanate of Oman recorded a high range. The study als
... Show MoreThe service system has become a necessity of life in modern cities to be the most basic necessities of modern humans, they constitute a major base, which is based on the sustainability of life in the city and a standard measured through the degree of well-being and progress of civilized peoples and their interaction with the surrounding environment, making the services sector as a need not be an option, whenever the cities widened in population and space whenever provision of services and upgrading the quality and quantity more pressing, which made the subject of the services takes the biggest area of the trends and thinking of urban planners and those who in charge of drawing the cities policies. Consideri
... Show Moreان السبب الرئيسي لاختيار الموضوع كونه من الاساليب الادارية الحديثة التي تهدف الى انجاح المنظمة او الشركة المبحوثة, اذ تمثلت مشكلة البحث في ما دور الادارة بالرؤية المشتركة في تعزيز التسويق الابداعي بالشركة المبحوثة, يهدف البحث الى تسليط الضوء على مفهوم الادارة بالرؤية المشتركة وانعكاساتها على التسويق الابداعي للمنظمة ، باعتبارها منهج اداري حديث يسهم في تغيير وتجديد وتطوير واقع المنظمة المبحوثة( الشرك
... Show More
(23)