From the course: Developing Secure Software (2015)

Unlock the full course today

Join today to access over 22,700 courses taught by industry experts or purchase this course individually.

Broken authentication and session management

Broken authentication and session management

From the course: Developing Secure Software (2015)

Start my 1-month free trial

Broken authentication and session management

“

- Authentication is one of the most common form of access control. Session management complements authentication by making the effect of authentication expire over time. Authentication verifies the identity of a supplicant who provides security credentials such as passwords. Authentication and session management often break due to reasons such as password cracking, insecure communication channels, insider threats or social engineering. More importantly, software developers often use their own custom code to implement authentication and session management. Building your own custom authentication and session management scheme is hard and prone to error, eventually leading to security vulnerabilities. Once compromised, broken authentication can allow unrestricted access to the software system resources which is extremely dangerous.

Contents