Control Strategy AccountLockingAtService

URI: CSG-AccountLockingAtService

Package: Network

< prev | next >

Description: The number of login attempts at service Service is limited, and user accounts locked when there are too many unsuccessful login attempts, or too many login attempts within a short period.

Blocked Threats (1)

CC.AuC.HumCCC-nS.3

Credential stuffing to find password used by Human to access Service from Client: this threat applies where a human user of client Client uses a weak password which can guessed or found by brute force attack and used by an attacker to access Service as the client.