Zvi Gutterman, Dahlia Malkhi: Hold Your Sessions: An Attack on Java Session-Id Generation. CT-RSA 2005: 44-57