Hack the Stack

Chapter 6

Layer 5: The Session Layer

Solutions in this chapter:

■ Attacking the Session Layer

■ Defending the Session Layer

■ Layer 5 Security Project

☑ Summary

☑ Solutions Fast Track

☑ Frequently Asked Question

Introduction

This chapter discusses the Session layer (layer 5) on the Open Systems Interconnect (OSI) model. In this chapter, we examine a number of well–known techniques that are used to attack sessions, and discuss the underlying qualities of the protocols that enable these attacks. We examine the limited options available for defending against session–based attacks, and how to leverage Session–layer qualities to aid in defending networks. This chapter focuses on the Session layer features of Transmission Control Protocol (TCP).

The Session layer ...