DES 276 – OWASP M6: Mitigating Insecure Authorization

Course Overview

In this course, you will learn how to mitigate the risks associated with Insecure Authorization which allows an adversary to execute functionality they should not be entitled to using an authenticated but lower-privilege user of the mobile app.

After completing this course, you will be able to:

• Identify best practices for implementing secure authorization for Mobile Internet of Things
• How to mitigate the threat of Insecure Authorization
• Identify and mitigate Insecure Direct Object Reference (IDOR) vulnerabilities