OWASPASVS 5.0 requirement
ASVS-V6.6.3 A code based out-of-band authentication mechanism is protected against brute force attacks by using rate limiting.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.6 Out-of-Band authentication mechanisms
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that a code based out-of-band authentication mechanism is protected against brute force attacks by using rate limiting. Consider also using a code with at least 64 bits of entropy.