Broken authentication and session management

- Authentication is one of the most common form of access control.…Session management complements authentication…by making the effect of authentication expire over time.…Authentication verifies the identity of a supplicant…who provides security credentials such as passwords.…Authentication and session management…often break due to reasons such as password cracking,…insecure communication channels,…insider threats or social engineering.…

More importantly, software developers often use…their own custom code to implement authentication…and session management.…Building your own custom authentication…and session management scheme is hard and prone to error,…eventually leading to security vulnerabilities.…Once compromised, broken authentication can allow…unrestricted access to the software system resources…which is extremely dangerous.…