Last Updated | 07 March 2022 |
Author | simonm@thecyberhut.com |
A selection of curated links relating to user login and authentication security controls and threat counter measures:
Gitlab Identity & Authentication Controls
Configure Microsoft Azure for NIST Authentication Assurance Levels (AAL)
NIST 800-63b Digital Identity Guidelines Authentication & Lifecycle Management
Mitre D3fend Framework Credential Hardening
OWASP Authentication Cheat Sheet
OWASP Forgotten Password Cheat Sheet
OWASP Password Storage Cheat Sheet
OWASP Session Management Cheat Sheet
OWASP Credential Stuffing Prevention Cheat Sheet
UK DWP Authentication Controls Document
UK NCSC Cloud Security Guidance – Identity and Authentication
UK NCSC Password Administration
For additions or corrections please comment or contact us.