Part 4 deals with two fundamental aspects of information security: authentication and authorization. Learn about basic, digest, and forms-based authentication, as well as multi-factor authentication and Kerberos. The icing on the cake is a discussion of how to mitigate two primary OWASP security risks: broken authentication and session management.