Authentication and Access Control Security Questions

Security and adversary perspective on authentication and authorization mechanisms. Includes common weaknesses such as weak and default credentials, missing multi factor authentication, insecure credential storage, replay and token theft, session fixation and poor session management, horizontal and vertical privilege escalation and broken access control, insecure direct object references, and common attack techniques such as brute force and credential stuffing. Covers mitigation strategies, secure design patterns, monitoring and logging for detection, threat modeling and hands on testing approaches for finding and validating these weaknesses.