Which technique best describes the goal of session hijacking by intercepting and impersonating one party in the connection?

Which technique best describes the goal of session hijacking by intercepting and impersonating one party in the connection?

• A. TCP/IP hijacking
• B. DroidSheep
• C. CRIME Attack
• D. RST hijacking

Answer: (A)

Taking over a live TCP conversation by impersonating one endpoint is TCP/IP hijacking. This means an attacker sits between the two endpoints, can observe the established connection, and injects or mirrors packets to take control of that session as if they were one of the participants. The goal is to continue the communication without the legitimate party realizing, effectively acting as that party and accessing the session’s resources. This transport-layer impersonation is what the term TCP/IP hijacking describes, focusing on seizing and maintaining a live connection rather than targeting a specific application-level mechanism. Tools like DroidSheep illustrate a different approach— hijacking web sessions by stealing cookies at the application layer—while CRIME targets TLS compression weaknesses and RST hijacking revolves around forcibly terminating a connection rather than covertly seizing it.

Taking over a live TCP conversation by impersonating one endpoint is TCP/IP hijacking. This means an attacker sits between the two endpoints, can observe the established connection, and injects or mirrors packets to take control of that session as if they were one of the participants. The goal is to continue the communication without the legitimate party realizing, effectively acting as that party and accessing the session’s resources. This transport-layer impersonation is what the term TCP/IP hijacking describes, focusing on seizing and maintaining a live connection rather than targeting a specific application-level mechanism. Tools like DroidSheep illustrate a different approach— hijacking web sessions by stealing cookies at the application layer—while CRIME targets TLS compression weaknesses and RST hijacking revolves around forcibly terminating a connection rather than covertly seizing it.