SVIG/python-bootcamp
7
0
Fork 1
Code Issues Pull Requests 1 Releases Wiki Activity

Update page 'OWASP test - Sloetjes'

xuanyi.wang
2023-05-25 17:31:40 +02:00
parent 029a5d01bb
commit aa9ae8e21a
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
OWASP test - Sloetjes.md
+4 -2
@@ -10,9 +10,11 @@
> * Monitor each login attempt, successful or not. > * Monitor each login attempt, successful or not.
> * If a login attempt fails: > * If a login attempt fails:
> > Record the IP address, timestamp, and username. > Record the IP address, timestamp, and username.
> > crease the count of failed attempts for this IP address and/or username. > crease the count of failed attempts for this IP address and/or username.
> * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username: > * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username:
> Use a geolocation service to identify the location of the IP. > Use a geolocation service to identify the location of the IP.
> Compare this location to the known or expected location of the user. > Compare this location to the known or expected location of the user.
> Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures. > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures.