Secure session management in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is session management in cybersecurity?

Session management is the process of securely handling a user's interaction period with a system, ensuring their identity and data remain protected during that time.

beginner

Why is it important to use secure cookies in session management?

Secure cookies ensure that session data is only sent over encrypted connections (HTTPS), protecting it from being intercepted by attackers.

intermediate

What is a session hijacking attack?

Session hijacking is when an attacker steals or guesses a user's session ID to impersonate them and gain unauthorized access.

intermediate

Name two best practices for secure session management.

1. Use short session timeouts to limit how long a session lasts.<br>2. Regenerate session IDs after login to prevent fixation attacks.

beginner

What role does token expiration play in session security?

Token expiration limits how long a session token is valid, reducing the risk if a token is stolen by automatically invalidating it after a set time.

Which of the following helps prevent session hijacking?

A Allowing unlimited session duration

B Disabling session timeouts

C Sharing session IDs in URLs

D Using HTTPS and secure cookies

Using HTTPS and secure cookies encrypts session data and prevents attackers from easily stealing session IDs.

What should happen to a session ID after a user logs in?

A It should be regenerated

B It should stay the same

C It should be shared with other users

D It should be deleted immediately

Regenerating the session ID after login prevents session fixation attacks where attackers reuse old session IDs.

What is the main purpose of session timeouts?

A To increase session duration

B To limit how long a session remains active

C To store user passwords

D To share session data publicly

Session timeouts automatically end sessions after inactivity, reducing the risk of unauthorized access.

Which is NOT a secure practice for session management?

A Using HTTP instead of HTTPS

B Setting secure and HttpOnly flags on cookies

C Implementing token expiration

D Validating session tokens on the server

Using HTTP sends data unencrypted, making session data vulnerable to interception.

What does the HttpOnly flag on a cookie do?

A Disables cookie expiration

B Makes the cookie visible to all websites

C Prevents client-side scripts from accessing the cookie

D Allows cookies to be shared across domains

The HttpOnly flag stops JavaScript from accessing the cookie, protecting it from cross-site scripting attacks.

Explain what secure session management means and why it is important in protecting user data.

Think about how websites keep you logged in safely.

Describe at least three best practices to ensure sessions remain secure during user interactions.

Consider what stops attackers from stealing or misusing sessions.