4

Analyze session security using Secure, HttpOnly, and SameSite cookie attributes.

3

Understand how cookies, session IDs, and tokens maintain user sessions.

2

Differentiate between authentication and session management.

1

Explain the purpose and importance of session management in web applications.

Imagine entering a shopping mall where you receive a visitor pass.

After showing your identity at the entrance, you receive a pass that allows you to move around the mall without proving your identity at every store.

Now imagine someone steals your pass. The staff may assume they are you because the pass is valid, allowing them to access areas meant for you.

Session management works in a similar way. After you log in, a web application gives your browser a session ID or token to remember that you are authenticated.

If an attacker steals this token, they may be able to act as you without knowing your password.

What is Session Management?

• Session management maintains a user's identity and interaction after login.

• It allows applications to recognize users across multiple requests.

Objectives

• Maintain user identity

• Track authenticated users

• Manage sessions

• Enforce access controls

Why It Is Important

• Keeps users securely authenticated during their session.

• Supports access control and activity tracking.

• Weak session management can allow user impersonation.

What is a Session?

• A session is a temporary connection between a user and a web application.

• It helps the application recognize users across multiple requests.

5

Build strong branding

4

Use different marketing channels

3

Target the right audience

2

Create and communicate value

1

Understand customer needs

A. Facebook

B. Instagram

C. LinkedIn

D. Snapchat

A. Facebook

B. Instagram

C. LinkedIn

D. Snapchat