Why attack detection based on the same user request from different places (e.g. by IP) is not widely used?

Published: 14/07/2018
Why attack detection based on the same user request from different places (e.g. by IP) is not widely used?
Source: SECURITY.STACKEXCHANGE.COM

There are many ways how an adversary can pretend that he is a legitimate user (like session cookie stealing, bruteforcing the password and what not), but as far as I can see it should be rather hard for them to go unnoticed if the system tries to protect against it, e.g. by detecting that the same user is logging in from a different IP within the short period of time and moreover continue to send

Read more
Related news
Comment
FACEBOOK