Search - DIB SCC CyberAssist

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Read Less

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/03-Identity_Management_Testing/04-Testing_for_Account_Enumeration_and_Guessable_User_Account

The scope of this test is to verify if it is possible to collect a set of valid usernames by interacting with the authentication mechanism of the application.

Open Web Application Security Project (OWASP) – Testing for Default Credentials 3.5 3.5.10 3.5.11 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Read Less

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/04-Authentication_Testing/02-Testing_for_Default_Credentials

This link discusses the process of testing web applications for default credentials.

RCDevs 3.5 3.5.2 3.5.3 Identification and Authentication

Read Less

https://www.rcdevs.com/products/openotp/

OpenOTP is a phishing-resistant MFA solution.

Red Hat – How to configure Account Policy Plugin in Red Hat Directory Server? 3.1 3.1.10 3.5 3.5.6 Access Control Identification and Authentication

Read Less

https://access.redhat.com/solutions/68164

This documentation from Red Hat, provides an administrator step by step instructions for configuring a lockout policy based on inactivity.

Red Hat Customer Portal – Chapter 20 Directory Servers 3.5 3.5.4 Identification and Authentication

Read Less

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/6/html/deployment_guide/ch-directory_servers

This link provides more information about using directory services within RedHat.

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

Read Less

https://www.rsa.com/products/securid/

Secure access to your extended enterprise with RSA SecurID Access, the leading multi-factor authentication and identity assurance solution.

SANS – Password Construction Guidelines 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

Read Less

https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blta5be14c7136a535f/5e9dde89db124263e8afce3d/password_construction_guidelines.pdf

This SANS guideline provides best practices for creating secure passwords.

SANS – Password Protection Policy 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

Read Less

https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blt56ee6e15d78eb882/5e9ddf05d5a1cb709eee4a22/password_protection_policy.pdf

This is a sample password protection policy from SANS.

SANS Institute – Global Information Assurance Certification Paper 3.5 3.5.4 Identification and Authentication

Read Less

https://www.giac.org/paper/gsec/1852/network-security-authentication-applications-kerberos-public-key-infrastructure/103260

This document shows how to improve the security of a network through the use of authentication applications.

SANS Whitepaper – An Overview of Different Authentication Methods and Protocols 3.5 3.5.2 Identification and Authentication

Read Less

https://www.sans.org/white-papers/118/

This SANS whitepaper generalizes several authentication methods and authentication protocols.

SEARCH RESULTS

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Default Credentials 3.5 3.5.10 3.5.11 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

RCDevs 3.5 3.5.2 3.5.3 Identification and Authentication

Red Hat – How to configure Account Policy Plugin in Red Hat Directory Server? 3.1 3.1.10 3.5 3.5.6 Access Control Identification and Authentication

Red Hat Customer Portal – Chapter 20 Directory Servers 3.5 3.5.4 Identification and Authentication

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

SANS – Password Construction Guidelines 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS – Password Protection Policy 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS Institute – Global Information Assurance Certification Paper 3.5 3.5.4 Identification and Authentication

SANS Whitepaper – An Overview of Different Authentication Methods and Protocols 3.5 3.5.2 Identification and Authentication

Resources

Legal

SEARCH RESULTS

Filter by type

Additional filters

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Default Credentials 3.5 3.5.10 3.5.11 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

RCDevs 3.5 3.5.2 3.5.3 Identification and Authentication

Red Hat – How to configure Account Policy Plugin in Red Hat Directory Server? 3.1 3.1.10 3.5 3.5.6 Access Control Identification and Authentication

Red Hat Customer Portal – Chapter 20 Directory Servers 3.5 3.5.4 Identification and Authentication

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

SANS – Password Construction Guidelines 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS – Password Protection Policy 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS Institute – Global Information Assurance Certification Paper 3.5 3.5.4 Identification and Authentication

SANS Whitepaper – An Overview of Different Authentication Methods and Protocols 3.5 3.5.2 Identification and Authentication