Weak identity and session controls can let attackers impersonate users or keep access longer than intended. Developers examine common attacks against authentication, identity management, and sessions, then review secure implementation and session-management practices for reducing these risks across the application lifecycle.

Participants of this module will…

• Be able to enumerate the most common attacks against authentication
• Understand how to mitigate those common attack vectors
• Realize how to manage sessions throughout the application lifecycle securely