Abstract:
Authentication and session management functions in web applications are used
to verify the identity of the user. Incorrect implementation of these functions allows
attackers to compromise passwords, keys or sessions tokens. When a user is
authenticated, an authenticated session can be established which usually gives the user
increased usability of the application, such as access to the user’s private data. The
purpose of this system is to conduct a web application security using simple brute force
and dictionary attack in broken authentication with combinatorial algorithm. There is
no best way to protect the user’s computer security, but always try to improve upon
what it has. The evaluation is implemented with the line graph of the time consuming
and password length. This system is implemented using C# programming language
with Microsoft SQL Server Database Engine.
