From aa9ae8e21ad1016c168da368edfc2b0f555ae152 Mon Sep 17 00:00:00 2001 From: "xuanyi.wang" Date: Thu, 25 May 2023 17:31:40 +0200 Subject: [PATCH] Update page 'OWASP test - Sloetjes' --- OWASP test - Sloetjes.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/OWASP test - Sloetjes.md b/OWASP test - Sloetjes.md index 9842d97..65171ea 100644 --- a/OWASP test - Sloetjes.md +++ b/OWASP test - Sloetjes.md @@ -10,9 +10,11 @@ > * Monitor each login attempt, successful or not. > * If a login attempt fails: - > > Record the IP address, timestamp, and username. - > > crease the count of failed attempts for this IP address and/or username. + > Record the IP address, timestamp, and username. + > crease the count of failed attempts for this IP address and/or username. > * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username: + + > Use a geolocation service to identify the location of the IP. > Compare this location to the known or expected location of the user. > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures.