YoVDO

The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers

Offered By: OWASP Foundation via YouTube

Tags

Conference Talks Courses Web Application Security Courses Phishing Courses Password Management Courses Security Analysis Courses Defense in Depth Courses

Course Description

Overview

Explore a comprehensive security analysis of web-based password managers in this conference talk from OWASP AppSec California 2015. Delve into four key security concerns identified through case studies of five popular web-based password managers. Discover severe vulnerabilities that could allow attackers to access user credentials for arbitrary websites. Examine issues in features like one-time passwords, bookmarklets, and shared passwords, stemming from logic errors, authorization mistakes, and misunderstandings of web security models. Learn about the challenges of securing password managers and gain insights into defense-in-depth strategies for future development. Understand the importance of addressing diverse vulnerabilities, including CSRF and XSS, to enhance the security of these critical tools.

Syllabus

Intro
Passwords are horrible
Password managers
Security
Webbased Password Managers
Bookmarklet vulnerabilities
Password database vulnerability
Authorization vulnerability
Phishing
Mitigations


Taught by

OWASP Foundation

Related Courses

Manage Office 365 Identities
Microsoft via edX
Cybersecurity Awareness and Innovation
EIT Digital via Coursera
Introduction to Cyber Security
Uttarakhand Open University, Haldwani via Swayam
PHP User Login Registration Script With All Features
Udemy
RESTful Web Services, Java, Spring Boot, Spring MVC and JPA
Udemy