Authentication
Pins and Passwords
Introduction How many of us have stared blankly at a login screen, desperately trying to recall that complex password? It’s a frustratingly common experience, and a surprisingly significant hurdle in securing mobile …
Authenticating Services in a Microservices Environment
Why this problem is easy to underestimate When we start building microservices, the first security question usually sounds simple: “Can we protect this API?” The first answer is also usually simple. Put a gateway in …
Application Security Verification Standard
s Ensuring the security of an application is a complex task. To simplify this process, OWASP (Open Web Application Security Project) has developed a standardized approach1 aimed at gauging and enhancing application …
Adaptive Authentication
Motivation behind this blog During a visit to my friend’s house, I needed to check my email on his laptop. Upon entering my credentials, I encountered a captcha prompt unexpectedly. After successfully navigating through …
Broken Access Control
Access Control in OWASP top 10 Access control is a crucial aspect of application security that ensures users can only perform actions within their authorized permissions. However, broken access control vulnerabilities …
Sim Binding
Sim binding is a process requirement by RBI to provide secure mobile applications. The RBI has issued the Master Direction on Digital Payment Security Controls to ensure the security of digital payment systems. The …