From 029a5d01bb559635c23c0d8d368f3a13d2bbfb6f Mon Sep 17 00:00:00 2001 From: "xuanyi.wang" Date: Thu, 25 May 2023 17:31:09 +0200 Subject: [PATCH] Update page 'OWASP test - Sloetjes' --- OWASP test - Sloetjes.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/OWASP test - Sloetjes.md b/OWASP test - Sloetjes.md index 6ee1b19..9842d97 100644 --- a/OWASP test - Sloetjes.md +++ b/OWASP test - Sloetjes.md @@ -13,9 +13,9 @@ > > Record the IP address, timestamp, and username. > > crease the count of failed attempts for this IP address and/or username. > * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username: - > > Use a geolocation service to identify the location of the IP. - > > Compare this location to the known or expected location of the user. - > > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures. + > Use a geolocation service to identify the location of the IP. + > Compare this location to the known or expected location of the user. + > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures. > * If the location doesn't match or there are too many attempts, it may be a brute force or break-in attempt. Notify the administrators based on these factors. * Describe the lifetime of a session-only cookie, and how this could be used to create a session authorization token.