Event

InfoSec World 2006

Session

Auditing Web Application Authentication
Wednesday, April 5, 2006
11:30am - 1pm
Track: E-Security

Overview

Many traditional authentication weaknesses that have been corrected on internal systems have resurfaced in your external web based applications. This session will provide you with the knowledge needed to measure the current state of the authentication mechanisms associated with your web applications

• Web Authentication from a business requirements perspective
• Technology options for implementing Web authentication
• Web-based SSO options
• Account provisioning and de-provisioning
• Password management and threats to authentication
• Password self-service recovery/reset techniques
• Session management and threats to authentication
• Social engineering