Protection Against Cross-Site Request Forgery Attacks

Introduction

The cross-site request forgery (CSRF) attack can be defined as an attempt to generate a malicious request on behalf of an authenticated user’s session.

Ways to introduce a CSRF attack

• Social engineering: The attack can bluff the targeted victim into prompting action to a malicious link. Upon opening the link, a CSR-based attack can be sent to the website. This link can be sent to the users via email or other social media platforms.

• Malvertising: Nowadays, marketing trends are becoming increasingly digitalized. Many internet-based publishers utilize websites to display their ads. The attacker can place malicious ads on websites that are visited by the victim. These ads can contain malicious code that executes when clicked.

• Session hijacking: The attacker tries to ...