CISSP: Certified Information Systems Security Professional

Session hijacking is an active attack in which an attacker takes over an authenticated session and can control the exchange of session data, enabling unauthorized modification of data in transit. NIST identifies session hijacking as an active attack and defines it as allowing an attacker to control session data exchange.