OWASPASVS 5.0 requirement
ASVS-V16.3.1 All authentication operations are logged, including successful and unsuccessful attempts.
- Standard
- OWASP ASVS 5.0
- Chapter
- V16 Security Logging and Error Handling
- Section
- V16.3 Security Events
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that all authentication operations are logged, including successful and unsuccessful attempts. Additional metadata, such as the type of authentication or factors used, should also be collected.