Which of the following defines session hijacking?

Session hijacking involves an attacker intercepting and taking over an active, authenticated communication session between a user and a server, often by stealing or guessing the session ID. This allows the attacker to impersonate the legitimate user and access resources or perform actions within that session.

This describes attacks like IP spoofing or DNS cache poisoning, which manipulate trust relationships at lower layers, rather than directly taking over an established session.

Creating random addresses for network packets is a technique used for security or anonymity, not the definition of session hijacking.

Making compute resources unavailable is the definition of a Denial of Service (DoS) attack, which is distinct from session hijacking.