Welcome Guest, Not a member yet? Register   Sign In
Mitigate brute force attacks on login page
#11

[eluser]novice32[/eluser]
Thanks guys for the feedback and suggestions. I'll have to research more the different options. I have working SaaS application and won't be able to easily integrate Community Auth. I'll look at leveraging some of its code. In the end, it will be a home grown solution.

Another thought that came to mind is showing a captcha after a certain number of failed attempts. The captcha would be based on ip. With captcha, I wouldn't need to lock accounts or anything of the sort.

Are there any good resources you could share regarding a captcha solution?

I'm thinking of blocking an IP and and displaying a captcha... say if there are more than 10 failed login requests / per IP.

Your thoughts?


Messages In This Thread
Mitigate brute force attacks on login page - by El Forum - 04-19-2012, 08:59 PM
Mitigate brute force attacks on login page - by El Forum - 04-19-2012, 11:47 PM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 04:42 AM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 05:15 AM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 10:26 AM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 10:50 AM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 10:55 AM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 12:11 PM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 12:39 PM
Mitigate brute force attacks on login page - by El Forum - 04-20-2012, 03:24 PM
Mitigate brute force attacks on login page - by El Forum - 04-22-2012, 09:40 AM
Mitigate brute force attacks on login page - by El Forum - 04-22-2012, 11:53 AM
Mitigate brute force attacks on login page - by El Forum - 04-22-2012, 12:23 PM
Mitigate brute force attacks on login page - by El Forum - 04-22-2012, 01:09 PM
Mitigate brute force attacks on login page - by El Forum - 04-22-2012, 11:41 PM
Mitigate brute force attacks on login page - by El Forum - 04-23-2012, 02:45 AM
Mitigate brute force attacks on login page - by El Forum - 04-25-2012, 07:34 PM
Mitigate brute force attacks on login page - by El Forum - 04-25-2012, 07:42 PM
Mitigate brute force attacks on login page - by El Forum - 04-25-2012, 07:47 PM



Theme © iAndrew 2016 - Forum software by © MyBB