How deeply does The Art of Code cover credential stuffing?

Defines leaked credential-pair reuse and identifies its warning sign, but does not detail detection or mitigation techniques.

Credential stuffing

As explained in The Art of Code

Credential stuffing is an automated attack that tests leaked username and password pairs against other services.

Credential stuffing is an automated attack that tests leaked username-and-password pairs against other services. Repeated invalid credentials in a login form can signal this threat rather than an ordinary user mistake. section 7.2.3

Treat repeated credential failures as actionable when they suggest an abnormal security event:

Log the event rather than allowing security-relevant failures to disappear among routine input mistakes. section 7.2.3
Monitor the resulting records and address suspected activity immediately. section 7.2.3

How The Art of Code covers it

liveBook manning.com

Read The Art of Code on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Secure APIsCredential stuffing is an attack that tries leaked username-and-password pairs against other services to take over accounts.
liveBook manning.com

Grokking Web Application SecurityA credential-stuffing attack tests large collections of previously stolen username-and-password pairs against a targeted service.

Compare how 3 books explain credential stuffing →

Related concepts

stolen credentialuses · A stolen credential is an account identifier or authentication secret obtained without the account holder’s authorization.
WebAuthnaddressed by · WebAuthn is a web authentication standard and browser API that enables public-key authentication using credentials managed by platform or external authenticators.
credential managementuses · Credential management is the controlled administration of authentication credentials, including their provisioning, storage, protection, validation, rotation, and revocation.
multifactor authenticationaddressed by · Multifactor authentication is an authentication method that verifies identity using evidence from at least two distinct authentication-factor categories.

This explainer was generated by Manning's knowledge graph from the text of The Art of Code. The section links point to the parts of the book it draws on.