Multiple choice general knowledge science & technology

"Use per user or session indirect object references" is the methodology to prevent which kind of security risk ?

  1. Cross Site Request Forgery

  2. Broken Authentication and Session Management

  3. Insecure Direct Object Refrences

  4. Insecure Cryptographic Storage

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Using per-user or session indirect object references (like using database IDs instead of sequential numbers) prevents Insecure Direct Object References. Without this, attackers can manipulate URLs or parameters to access other users' data by guessing or incrementing IDs. This ensures users can only access objects they're authorized to see.