Difference between revisions of "Security/Bruteforce"

Revision as of 16:17, 20 February 2013

In order to prevent bruteforce attacks on passwords to meaures are implemented

Maximum number of retries for passwords
Detection of spread attacks across multiple accounts

Detection of spread attacks are implemented by registering the number of failed login attempts during a defined amount of time. If a certain threshold is passed, the server will temporaryly deny further login attempts, for a defined aamout of time. During this period the server will function normally for allready logged in users.

Configuration options for Maximum number of retries are

http://tempusserva.dk/mediawiki/index.php?title=Policy_reference#Security

Configuration options for Brute force detection are

http://tempusserva.dk/mediawiki/index.php?title=Policy_reference#Protection

@@ Line 3: / Line 3: @@
 * Detection of spread attacks across multiple accounts
-Configuration options are
+Detection of spread attacks are implemented by registering the number of failed login attempts during a defined amount of time.
+If a certain threshold is passed, the server will temporaryly deny further login attempts, for a defined aamout of time.
+During this period the server will function normally for allready logged in users.
+Configuration options for Maximum number of retries are
+http://tempusserva.dk/mediawiki/index.php?title=Policy_reference#Security
+Configuration options for Brute force detection are
 http://tempusserva.dk/mediawiki/index.php?title=Policy_reference#Protection

Difference between revisions of "Security/Bruteforce"

Revision as of 16:17, 20 February 2013

Navigation menu

Search