us3976255 فشل ترس

A07:2021 – Identification and Authentication Failures - OWASP

OverviewDescriptionHow to PreventExample Attack ScenariosReferences Where possible, implement multi-factor authentication to prevent automated credential stuffing, brute force, and stolen credential reuse attacks.Do not ship or deploy with any default credentials, particularly for admin users.Implement weak password checks, such as testing new or changed passwords against the top 10,000 worst passwords list. Where possible, implement multi-factor authentication to prevent automated credential stuffing, brute force, and stolen credential reuse attacks.Do not ship or deploy with any default credentials, particularly for admin users.Implement weak password checks, such as testing new or changed passwords against the top 10,000 worst passwords list.Align password length, complexity, and rotation policies with National Institute of Standards and Technology (NIST) 800-63b's guidelines in section 5.1.1 for Memorized Secrets or other modern, evid...展开选择时，新内容将添加到焦点当区域上方在owasp上