From the course: CSSLP Cert Prep: 1 Secure Software Concepts

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Authentication

Authentication

From the course: CSSLP Cert Prep: 1 Secure Software Concepts

Start my 1-month free trial

Authentication

- [Instructor] If an application contains sensitive or private information, then chances are you don't want to allow just anyone to access that data. Think of your app like a bank vault and the data like the gold stored within that vault. Before you allow someone into the vault, they need to prove to you that they're allowed to be there. That locked door is an example of an authentication control. Authentication controls require that users prove they are who they say they are before they're granted access to any sensitive data within your app. You'll likely have additional authorization controls that determine what a user can do once they're logged in, but it's your authentication controls that keep unauthorized users out in the first place. The ability to validate a user's identity and to determine what the user is allowed to access is one of the fundamental controls of not just application security but of information security…

Contents