Update page 'OWASP test - Sloetjes'
+4
-2
@@ -10,9 +10,11 @@
|
||||
> * Monitor each login attempt, successful or not.
|
||||
> * If a login attempt fails:
|
||||
|
||||
> > Record the IP address, timestamp, and username.
|
||||
> > crease the count of failed attempts for this IP address and/or username.
|
||||
> Record the IP address, timestamp, and username.
|
||||
> crease the count of failed attempts for this IP address and/or username.
|
||||
> * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username:
|
||||
|
||||
|
||||
> Use a geolocation service to identify the location of the IP.
|
||||
> Compare this location to the known or expected location of the user.
|
||||
> Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures.
|
||||
|
||||
Reference in New Issue
Block a user