How Firesheep Can Hijack Web Sessions

Firesheep is a Firefox extension used to hijack web sessions, usually used over WiFi networks. Firesheep doesn't steal usernames and passwords, instead it copies session cookies used on authenticated websites. These are then used to impersonate the hijacked connection. Session hijacking, or sidejacking is a well known problem, ranking 3rd on OWASP's (Open Web Application Security Project) Top 10 Application Security Risk list. Attackers using Firesheep just need access to network traffic -- such as on an unencrypted WiFi network, or with a man-in-the-middle attack. Here's how it's done.

Source: http://feeds.informationweek.com/click.phdo?i=e387430f11df7164f64808fc8e8e9764

OSI SYSTEMS ORACLE