Patent ID: 8738782

Claim:
A method for detecting session hijacking of web-based applications, the method comprising: receiving a request from a client at a server, wherein the request comprises a session cookie associated with a session and the client; analyzing the session cookie to retrieve an order identifier for the session cookie, wherein the order identifier is generated at a time when the session cookie is submitted to the server, and wherein the order identifier comprises at least one of: a timestamp to facilitate determining if the session cookie was submitted after all of the previously received session cookies, or a counter value that is incremented each time a session cookie is submitted to facilitate determining if the session cookie was submitted after all of the previously received session cookies; comparing the order identifier from the session cookie with order identifiers for previously received session cookies for the session, wherein said comparing includes: determining if the first order identifier is greater than all of the previously received order identifiers, and determining if the order identifier is equal to the greatest of the previously received order identifiers; and if the order identifier is not greater than all of the previously received order identifiers, and is not equal to the greatest of the previously received order identifiers, indicating that the session has been hijacked, terminating the session, and notifying an administrator.