Search - DIB SCC CyberAssist

NIST SP 800-175b Guideline for Using Cryptographic Standards in the Federal Government 3.1 3.1.13 3.1.17 3.1.19 3.13 3.13.10 3.13.11 3.13.15 3.13.16 3.13.8 3.5 3.5.10 3.8 3.8.6 Access Control Identification and Authentication Media Protection System and Communications Protection

Read Less

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-175Br1.pdf

This NIST Special Publication is one part in a series of documents intended to provide guidance to the Federal Government for using cryptography to protect its sensitive, but unclassified digitized information during transmission and while in storage.

NIST SP 800-53: IA-2 Identification and Authentication (Organization Users) 3.5 3.5.3 3.7 3.7.5 Identification and Authentication Maintenance

Read Less

https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_0/home?element=IA-2

The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users).

NIST SP 800-53: IA-4 Identifier Management 3.5 3.5.5 Identification and Authentication

Read Less

https://nvd.nist.gov/800-53/Rev4/control/IA-4

This special publication from NIST provides an overview of Identifier Management.

NIST SP 800-63B Digital Identity Guidelines 3.5 3.5.2 Identification and Authentication

Read Less

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf

This NIST Special Publication provides technical requirements for federal agencies implementing digital identity services.

Open Web Application Security Project (OWASP) – Authentication Cheat Sheet 3.5 3.5.2 Identification and Authentication

Read Less

https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Authentication_Cheat_Sheet.md

This cheat sheet from OWASP provides general authentication guidelines.

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Read Less

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/03-Identity_Management_Testing/04-Testing_for_Account_Enumeration_and_Guessable_User_Account

The scope of this test is to verify if it is possible to collect a set of valid usernames by interacting with the authentication mechanism of the application.

Open Web Application Security Project (OWASP) – Testing for Default Credentials 3.5 3.5.10 3.5.11 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Read Less

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/04-Authentication_Testing/02-Testing_for_Default_Credentials

This link discusses the process of testing web applications for default credentials.

Red Hat – How to configure Account Policy Plugin in Red Hat Directory Server? 3.1 3.1.10 3.5 3.5.6 Access Control Identification and Authentication

Read Less

https://access.redhat.com/solutions/68164

This documentation from Red Hat, provides an administrator step by step instructions for configuring a lockout policy based on inactivity.

Red Hat Customer Portal – Chapter 20 Directory Servers 3.5 3.5.4 Identification and Authentication

Read Less

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/ch-directory_servers

This link provides more information about using directory services within RedHat.

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

Read Less

https://www.rsa.com/products/securid/

Secure access to your extended enterprise with RSA SecurID Access, the leading multi-factor authentication and identity assurance solution.

SEARCH RESULTS

NIST SP 800-175b Guideline for Using Cryptographic Standards in the Federal Government 3.1 3.1.13 3.1.17 3.1.19 3.13 3.13.10 3.13.11 3.13.15 3.13.16 3.13.8 3.5 3.5.10 3.8 3.8.6 Access Control Identification and Authentication Media Protection System and Communications Protection

NIST SP 800-53: IA-2 Identification and Authentication (Organization Users) 3.5 3.5.3 3.7 3.7.5 Identification and Authentication Maintenance

NIST SP 800-53: IA-4 Identifier Management 3.5 3.5.5 Identification and Authentication

NIST SP 800-63B Digital Identity Guidelines 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Authentication Cheat Sheet 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Default Credentials 3.5 3.5.10 3.5.11 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Red Hat – How to configure Account Policy Plugin in Red Hat Directory Server? 3.1 3.1.10 3.5 3.5.6 Access Control Identification and Authentication

Red Hat Customer Portal – Chapter 20 Directory Servers 3.5 3.5.4 Identification and Authentication

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

Resources

Legal

SEARCH RESULTS

Filter by type

Additional filters

NIST SP 800-175b Guideline for Using Cryptographic Standards in the Federal Government 3.1 3.1.13 3.1.17 3.1.19 3.13 3.13.10 3.13.11 3.13.15 3.13.16 3.13.8 3.5 3.5.10 3.8 3.8.6 Access Control Identification and Authentication Media Protection System and Communications Protection

NIST SP 800-53: IA-2 Identification and Authentication (Organization Users) 3.5 3.5.3 3.7 3.7.5 Identification and Authentication Maintenance

NIST SP 800-53: IA-4 Identifier Management 3.5 3.5.5 Identification and Authentication

NIST SP 800-63B Digital Identity Guidelines 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Authentication Cheat Sheet 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Default Credentials 3.5 3.5.10 3.5.11 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Red Hat – How to configure Account Policy Plugin in Red Hat Directory Server? 3.1 3.1.10 3.5 3.5.6 Access Control Identification and Authentication

Red Hat Customer Portal – Chapter 20 Directory Servers 3.5 3.5.4 Identification and Authentication

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication