From the course: Securing ASP.NET Core Apps: Advanced Techniques for Web Application Security

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Authentication attack

Authentication attack

- [Instructor] A common threat that web developers face is the authentication attack, or as we might call it differently, the brute-force attack. A brute-force attack is an attempt to discover a password by systematically trying every possible combination of letters, numbers, and symbols until you discover the one correct combination that works. Depending on the password policy, it can be either really easy or hard to guess. In these cases, what happens is that you have a really large file with commonly used passwords consisting of letters and numbers, and you just try. You try until you find the right match. But how can you prevent your apps from these kind of attacks? First of all, you can implement multifactor authentication or MFA. What this means is that each time you log into your app, the user will receive a secret key or a secret password in their mobile phone or their email address which then they can use to log…

Contents