WARNING — Authorized Use Only

This system contains Controlled Unclassified Information (CUI) and is for authorized users only. Unauthorized access or use is prohibited and may be subject to civil and criminal penalties under federal law (18 U.S.C. § 1030).

By logging in, you consent to monitoring and recording of all activities on this system. There is no expectation of privacy in any material on this system.

Log in to account

Security Info: Login Authentication

Protocol / Algorithm

Local bcrypt password verification

Credentials in Transit

Password sent over TLS to Augur; verified against bcrypt hash

Actions (Step by Step)

User submits credentials
Augur verifies password locally
Session established on success
All attempts are audit-logged

Security Properties

Rate limiting: 5 failures per 15 min per IP
Progressive account lockout on repeated failures
Audit trail for all login attempts (success and failure)
Session tokens with configurable expiry

Attack Surfaces & Mitigations

Credential stuffing (mitigated by rate limiting + lockout)
Session fixation (mitigated by session ID renewal on login)
Phishing (mitigated by CUI banner awareness)

CMMC Practice References

Practice	Description
AC.L1-3.1.1	Limit access to authorized users
AC.L2-3.1.8	Limit login attempts
AC.L2-3.1.9	Login banner
AU.L2-3.3.1	Audit login events