Umbra Wiki defense defense/D3-TBA
Back to wiki

D3-TBA — Token-based Authentication

provenance: imported · ATT&CK: T1134 T1134.001 T1134.002 T1134.003 T1528 T1550 T1550.001 T1558 T1558.001 T1558.002 T1558.003 T1558.004 T1558.005

D3-TBA: Token-based Authentication

MITRE D3FEND countermeasure

What it does

Token-based authentication is an authentication protocol where users verify their identity in exchange for a unique access token. Users can then access the website, application, or resource for the life of the token without having to re-enter their credentials.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source