MITRE D3FENDdefensive technique

D3-CBAN Certificate-based Authentication

Official page ↗
Tactic
Harden

Definition

Requiring a digital certificate in order to authenticate a user.

How it works

How it works Certificate-based authentication is a security mechanism that uses digital certificates to verify the identity of a user, device, or server before granting access to a network or system. This method relies on a pair of cryptographic keys: a public key and a private key. Considerations • Private Key Protection: Ensure that private keys are securely stored and protected against unauthorized access. • Certificate Revocation: Implement a robust process for revoking certificates if they are compromised or no longer needed. • Man-in-the Middle Attacks: Use mutual authentication to mitigate the risk of these attacks.

Related

Counters · MITRE ATT&CK (1)

  • T1649 Steal or Forge Authentication Certificates technique

Child of · MITRE D3FEND (1)

  • D3-AA Agent Authentication defensive technique

References