Science and Technology · Cyber Security

Consider the following statements regarding the cybersecurity threat known as 'Session Hijacking': (i) It involves compromising a user's valid session token to gain unauthorized access, exploit data, or misuse credentials. (ii) IP spoofing is a common network-level method used in session hijacking where an attacker assumes the identity of an authenticated host. (iii) Session hijacking can be prevented by intentionally utilizing packet sniffers and deploying cross-site scripting (XSS) vectors. (iv) To properly protect a network, the security administrator must implement defensive measures at both the Application and Network layers.