Web Security: User Authentication and Access Control

Learn the fundamentals of verifying user authenticity, best practices for managing passwords and user logins, and how to prevent unauthorized access to web pages and actions.

Introduction

• Verify identity and access privileges

1. User Authentication

• The importance of authentication
• Authentication factors
• Credentials
• Multi-factor authentication
• Pitfalls of multi-factor authentication
• Biomertric authentication

2. Passwords

• Password hashing
• Brute force attacks
• Speed and throttling
• Dictionary attacks
• Salted passwords
• Strong passwords and password managers

3. Managing User Passwords

• Password requirements
• Password theft and reuse
• Handle forgotten passwords

4. Access Control

• Insecure references
• Regulating access privileges
• Cookies and sessions
• Deny lists and geofilters
• Single sign-on services

Conclusion

• Next steps