The solution options are as follows:
- Leverage authorization and authentication to prevent spoofing of identity and identify trust boundaries
- Design various controls to prevent access to sensitive data or system
- Establish monitoring and instrumentation to analyze user interaction for critical operations
- Protect against damage by ensuring that you validate all inputs for type, range, and length, and sanitize principles
- Partition users into anonymous, identified, and authenticated, and leverage monitoring and instrumentation for audit instrumentation, logging and root cause analysis
- Leverage encryption, sign-sensitive data, and use secure transport channels
- Reduce session timeouts and implement solutions to detect and mitigate ...