Use the revised OWASP Top Ten to secure your Web applications - Part 7
Source: Tom Olzak
The seventh installment in the 2007 OWASP Top 10 series takes a look at broken authentication and session management vulnerabilities. Tom Olzak explains the nature of this weakness followed by recommendations for protecting Web applications from attacks related to this security problem.
This download is also available as a TechRepublic article.