DETECTING WEB APPLICATION’S BROKEN AUTHENTICATION BY USING COMBINATORIAL ALGORITHM

Abstract

Authentication and session management functions in web applications are used to verify the identity of the user. Incorrect implementation of these functions allows attackers to compromise passwords, keys or sessions tokens. When a user is authenticated, an authenticated session can be established which usually gives the user increased usability of the application, such as access to the user’s private data. The purpose of this system is to conduct a web application security using simple brute force and dictionary attack in broken authentication with combinatorial algorithm. There is no best way to protect the user’s computer security, but always try to improve upon what it has. The evaluation is implemented with the line graph of the time consuming and password length. This system is implemented using C# programming language with Microsoft SQL Server Database Engine.