Event

The Conference on Identity Managment

Session

Auditing Web Application Authentication
Tuesday June 27, 2006
3:30pm - 5pm
Track: Tools & Techniques

Overview

Many traditional authentication weaknesses that have been corrected on internal systems have resurfaced in your external web based applications. This session will provide you with the knowledge needed to measure the current state of the authentication mechanisms associated with your web applications

• Web Authentication from a business requirements perspective
• Technology options for implementing Web authentication
• Web-based SSO options
• Account provisioning and de-provisioning
• Password management and threats to authentication
• Password self-service recovery/reset techniques
• Session management and threats to authentication
• Social engineering