MITRE D3FENDdefensive technique
D3-CBAN Certificate-based Authentication
- Tactic
- Harden
Definition
Requiring a digital certificate in order to authenticate a user.
How it works
How it works
Certificate-based authentication is a security mechanism that uses digital certificates to verify the identity of a user, device, or server before granting access to a network or system. This method relies on a pair of cryptographic keys: a public key and a private key.
Considerations
• Private Key Protection: Ensure that private keys are securely stored and protected against unauthorized access.
• Certificate Revocation: Implement a robust process for revoking certificates if they are compromised or no longer needed.
• Man-in-the Middle Attacks: Use mutual authentication to mitigate the risk of these attacks.
Related
Counters · MITRE ATT&CK (1)
- T1649 Steal or Forge Authentication Certificates technique
Child of · MITRE D3FEND (1)
- D3-AA Agent Authentication defensive technique
References
- https://www.idmanagement.gov/university/fpki/ Federal Public Key Infrastructure 101