Month: September 2010

Detect MITM attacks and Secure your clients

The following code demonstrates a dynamic URL generator written in C# for use in ASP.NET, implemented as a static class method, and its corresponding parser module that singles out MITM attackers by detecting multiple IP address mismatches originating from the same IP address. To keep the code simple so that it makes sense easily, the

Symmetric key Encryption and Decryption

I saw many of the applications with out basic level of security with respect to data transfer etc. Few people uses Base64 Encoding while sending data through URL which is a common practice. But a simple Javascript code can reverse engineer your Base64 encoded string. If you wanna try to reverse engineer your Base64 encoded

Session Threats and Counter Measures

Session management for Web applications is an application layer responsibility. Session security is critical to the overall security of the application. Top session management threats include: ● Session hijacking ● Session replay ● Man in the middle Session Hijacking A session hijacking attack occurs when an attacker uses network monitoring software to capture the authentication

ASP.Net Session State Issue with HTTPHandler

When you are using ASP.Net Sessions and try to utilize HTTPHandler you will face Issues with Session State. some time you will get page break issues as well. To avoid the issues with HTTPHandlers you need to understand the SessionState Marker Interface. The System.Web.SessionState namespace supplies classes and interfaces that enable storage of data specific
SiteLock