Account Lockout
- •
def
- •
a security control that disables a user account after a defined number of failed login attempts
- •
- •
purpose
- •
limits the effectiveness of a [brute force](Brute Force (Password Attack)) attack against a single account; also serves as an indicator of compromise when it happens unexpectedly
- •
- •