SessionJuggler Secure Web Login from an Untrusted Terminal Using Session Hijacking

Elie Bursztein; Chinmay Soman; Dan Boneh; John C. Mitchell

mobile

SessionJuggler Secure Web Login from an Untrusted Terminal Using Session Hijacking

By Elie Bursztein, Chinmay Soman, Dan Boneh, John C. Mitchell @WWW 2012

0 reaction(s) | 0 downloads

Session Juggler allows to log into any websites on an untrusted terminal on any modern browser by using a simple bookmarklet and a smartphone. The site credentials are never transmited to the untrusted. With Session Juggler users never enter their long term credential on the untrusted terminal. Instead, users log in to a web site using a smartphone app and then transfer the entire session, including cookies and all other session state, to the untrusted terminal.

Downloads

paper

slides

@INPROCEEDINGS {
title	= {SessionJuggler Secure Web Login from an Untrusted Terminal Using Session Hijacking}
author	= {Elie Bursztein and Chinmay Soman and Dan Boneh and John C. Mitchell}
booktitle	= {World Wide Web(WWW)}
year	= {2012}
month	= {April}
url	= {\url{http://elie.im/publication/sessionjuggler-secure-web-login-from-an-untrusted-terminal-using-session-hijacking}}
}