AUTHORIZATION (AZ9)
Mike can misuse an application by using a valid feature too fast, or too frequently, or other way that is not intended, or consumes the application's resources, or causes race conditions, or over-utilizes a feature
Mike can misuse an application by using a valid feature too fast, or too frequently, or other way that is not intended, or consumes the application's resources, or causes race conditions, or over-utilizes a feature
OWASP SCP
94
OWASP ASVS
11.1.3,11.1.4
OWASP AppSensor
AE3,FIO1,FIO2,UT2,UT3,UT4,STE1,STE2,STE3
CAPEC
-
SAFECODE
1,35
Protect against automated threats to web applications such as:
Account aggregation. Account creation. Ad fraud. CAPTCHA bypass. Carding. Card cracking. Cashing out. Credential cracking. Credential stuffing. Denial of service. Expediting. Fingerprinting. Footprinting. Scalping. Scraping. Skewing. Sniping. Spamming. Token cracking. Vulnerability scanning. See also related automation attacks in Authentication AT 4 and AT 7.
Mappings
OWASP ASVS (4.0): 11.1.3 ,11.1.4
OWASP SCP: 94
OWASP Appsensor: AE3,FIO1,FIO2,UT2,UT3,UT4,STE1,STE2,STE3
Safecode: 1,35
ASVS (4.0) Cheatsheetseries Index
ASVS V11.1 - Business Logic Security Requirements
No suitable mappings were found.
