Our latest paper on web session security has been accepted at ESORICS 2019! It presents an overview of attacks and existing countermeasures, and proposes testing strategies to identify implementation flaws which may undermine security. Our approach found several vulnerabilities in existing websites, have a look here for more!