SVIG/python-bootcamp
7
0
Fork 1
Code Issues Pull Requests 1 Releases Wiki Activity

Update page 'OWASP test - Sloetjes'

xuanyi.wang
2023-05-25 17:31:09 +02:00
parent 129e30d4a7
commit 029a5d01bb
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
OWASP test - Sloetjes.md
+3 -3
@@ -13,9 +13,9 @@
> > Record the IP address, timestamp, and username. > > Record the IP address, timestamp, and username.
> > crease the count of failed attempts for this IP address and/or username. > > crease the count of failed attempts for this IP address and/or username.
> * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username: > * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username:
> > Use a geolocation service to identify the location of the IP. > Use a geolocation service to identify the location of the IP.
> > Compare this location to the known or expected location of the user. > Compare this location to the known or expected location of the user.
> > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures. > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures.
> * If the location doesn't match or there are too many attempts, it may be a brute force or break-in attempt. Notify the administrators based on these factors. > * If the location doesn't match or there are too many attempts, it may be a brute force or break-in attempt. Notify the administrators based on these factors.
* Describe the lifetime of a session-only cookie, and how this could be used to create a session authorization token. * Describe the lifetime of a session-only cookie, and how this could be used to create a session authorization token.