⚠
BowTie Risk
Assessments
Hazards
Library
Implementations
Guide
← Back
Edit Barrier
Name
Type
Prevention
Mitigation
General
Category
Tags
(comma-separated)
Description
The system shall protect the integrity of sessions against hijacking and eavesdropping. Session tokens shall be unpredictable, unique, and invalidated upon session termination or timeout.
Save changes
Cancel