MITRE D3FENDdefensive technique

D3-WSAM Web Session Access Mediation

Official page ↗
Tactic
Isolate

Definition

Web session access mediation secures user sessions in web applications by employing robust authentication and integrity validation, along with adaptive threat mitigation techniques, to ensure that access to web resources is authorized and protected from session-related attacks.

How it works

How it works Web Session Access Mediation involves managing user access to web applications and services, ensuring secure and authorized sessions. This includes authenticating users, maintaining session integrity, and protecting against threats like session hijacking. Examples include accessing corporate intranets, SaaS applications, or online portals.

Related

Counters · MITRE ATT&CK (16)

  • T1621 Multi-Factor Authentication Request Generation technique
  • T0821 Modify Controller Tasking technique
  • T0806 Brute Force I/O technique
  • T0813 Denial of Control technique
  • T0814 Denial of Service technique
  • T0819 Exploit Public-Facing Application technique
  • T0878 Alarm Suppression technique
  • T1003.001 LSASS Memory sub-technique
  • T1003.002 Security Account Manager sub-technique
  • T1556 Modify Authentication Process technique
  • T1550 Use Alternate Authentication Material technique
  • T1505.002 Transport Agent sub-technique
  • T1505 Server Software Component technique
  • T1212 Exploitation for Credential Access technique
  • T1003 OS Credential Dumping technique
  • T1033 System Owner/User Discovery technique

Child of · MITRE D3FEND (1)

  • D3-NRAM Network Resource Access Mediation defensive technique

Referenced by MITRE D3FEND · child of (2)

  • D3-EBWSAM Endpoint-based Web Server Access Mediation defensive technique
  • D3-PBWSAM Proxy-based Web Server Access Mediation defensive technique

References