Section A
User Credentials are commonly used to authenticate and identify users when logging onto an application. When user credentials are obtained by unauthorised users, it ultimately results in user information being intercepted. Protecting user credentials from unauthorised users is an imperative task. This response (to EY Certificate 6 Assignment – Section A) will discuss how to protect passwords/user credentials.
Protecting user credentials as well as user information brings into play all relevant security models. I have created my security model into the following: Process Physical Network Application
Database

Process
The process layer defines the overall setup of the security architecture. It indicates how the security structure should be laid out. For …show more content…
Adding a salt to a hashed password makes it more difficult for a hacker to crack the password. Salting is the process of generating a unique string that could be added to the password to make your password more stronger to attacks. If you add a salt to the above hashed password, your representation could be Salt plus the Hashed password which makes it more difficult to crack.
Hashing and salting your password is a great way to go however, password setup process could also help secure user credentials more safely. When registering users it is very good practice to benchmark password strength against reputable standard such as CIS in order to disallow weak password from being entered by the user. A guiding document such as password policy document can be established from reputable standards and configured into the system. Requiring users to enter password that are eight or more characters long , a number onto the password and a symbol could produce a password very complex password which combined with hashing and salting mechanisms is almost impossible to