OWASPASVS 5.0 requirement
ASVS-V8.2.4 Adaptive security controls based on a consumer's environmental and contextual attributes (such as time of day, location, ip address, or…
- Standard
- OWASP ASVS 5.0
- Chapter
- V8 Authorization
- Section
- V8.2 General Authorization Design
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that adaptive security controls based on a consumer's environmental and contextual attributes (such as time of day, location, IP address, or device) are implemented for authentication and authorization decisions, as defined in the application's documentation. These controls must be applied when the consumer tries to start a new session and also during an existing session.