OWASPASVS 5.0 requirement
ASVS-V7.3.1 There is an inactivity timeout such that re-authentication is enforced according to risk analysis and documented security decisions.
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.3 Session Timeout
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that there is an inactivity timeout such that re-authentication is enforced according to risk analysis and documented security decisions.