Authentication factors

• Something you know: password,….
• Something you have: phone number, security token
• Something you are: your biometrics or patterns of behavior

How do authentication vulnerabilities arise?

• brute-force attacks
• logic flaws or poor coding

Vulnerabilities in password-based login

Brute-force attack

• brute-force username, password
• enum username