Syifaurachman

LLM-Based Kill Chain Detection for Cookie-Based Identity Theft: A Framework Aligned with MITRE ATT&CK and OWASP Top 10:2025

Session cookies sustain authenticated state in modern web applications; once compromised, they allow adversaries to impersonate legitimate users without requiring passwords or Multi-Factor Authentication (MFA) credentials. Although HTTPS and cookie security attributes such as Secure, HttpOnly, and SameSite are widely d...