How to Stop Cyber Attacks Using Adaptive Authentication
1 like624 views
The document discusses the topic of adaptive authentication as a critical measure to counter cyber attacks, highlighting the inadequacy of traditional security methods like passwords and two-factor authentication. It outlines various identity-relevant data factors that can enhance trust in user identities, such as device recognition, IP reputation, and behavioral biometrics. Ultimately, it emphasizes the importance of layered adaptive authentication techniques to improve security while maintaining user experience.
How to Stop Cyber Attacks Using Adaptive Authentication
- 1. Stop Cyber Attackers in Their Tracks with Adaptive Authentication December 1, 2015
- 2. 2Stop Cyber Attackers in Their Tracks with Adaptive Authentication Today’s Speakers Tim Arvanites Vice President, Technical Services SecureAuth Darin Pendergraft Vice President, Marketing SecureAuth
- 3. 3Stop Cyber Attackers in Their Tracks with Adaptive Authentication WebEx Housekeeping + All attendee audio lines are muted + Submit questions via Q&A panel at any time + Questions will be answered during Q&A at the end of the presentation + Slides and recording will be sent later this week + Contact us at webinars@secureauth.com
- 4. 4Stop Cyber Attackers in Their Tracks with Adaptive Authentication Agenda + Today’s Reality + The Alternative + Adaptive Authentication in SecureAuth™ IdP Demo + Q & A
- 5. 5Stop Cyber Attackers in Their Tracks with Adaptive Authentication
- 6. 6Stop Cyber Attackers in Their Tracks with Adaptive Authentication The reality is…. + Preventative measures are failing + We’re never going to totally stop an attack – There are humans involved (on both sides) – The battlefield is asymmetric + Passwords are no longer good enough + There is hope!
- 7. 7Stop Cyber Attackers in Their Tracks with Adaptive Authentication Lets Examine an Attack
- 8. 8Stop Cyber Attackers in Their Tracks with Adaptive Authentication Tighter security has a price + Consumerization of IT – Our users demand less “friction” – BYOD means all kinds of devices must get access – Mix of business and personal apps + Is Two-Factor the Best We’ve Got? – Better than passwords alone – Requires the user to do something – Hardware tokens can be lost or stolen
- 9. So what’s the alternative?
- 10. 10Stop Cyber Attackers in Their Tracks with Adaptive Authentication Adaptive Authentication + Using an open-ended variety of identity-relevant data to incrementally elevate the trust in a claimed identity* + When layered together, they’re powerful *Gartner - A Taxonomy of User Authentication Methods, April 2014 – Device Recognition – IP Reputation Data – Identity Store Lookup – Geo-Location – Geo-Velocity – Behavioral Biometrics
- 11. 11Stop Cyber Attackers in Their Tracks with Adaptive Authentication Device Recognition + First time authentication: register the endpoint device + Subsequent authentications: validate the endpoint device + Device recognition can include: – web browser configuration – device IP address – language – screen resolution – installed fonts – browser cookies settings – browser plugin – time zone
- 12. 12Stop Cyber Attackers in Their Tracks with Adaptive Authentication IP Reputation Data
- 13. 13Stop Cyber Attackers in Their Tracks with Adaptive Authentication Identity Store Lookup + Compare and filter based on information in the store + Can be based on any attribute of the user
- 14. 14Stop Cyber Attackers in Their Tracks with Adaptive Authentication Geo-Location + Compare the users current geographic location against good or bad locations
- 15. 15Stop Cyber Attackers in Their Tracks with Adaptive Authentication Geo-Velocity + Compare current location and login history to determine whether an improbable travel event has occurred
- 16. 16Stop Cyber Attackers in Their Tracks with Adaptive Authentication + Analyze behavior that can be used to verify a person + Gather & store characteristics about the way the user interacts with a device such as: – Keystroke dynamics – Mouse movements – Gesture patterns – Motion patterns Behavioral Biometrics
- 17. 17Stop Cyber Attackers in Their Tracks with Adaptive Authentication Putting it all together
- 18. SecureAuth™ IdP Live Demo
- 19. 19Stop Cyber Attackers in Their Tracks with Adaptive Authentication Why SecureAuth™ IdP? Two-factor, adaptive authentication and SSO in one solution
- 20. 20Stop Cyber Attackers in Their Tracks with Adaptive Authentication There is hope + Adaptive authentication: an emerging trend in authentication technology + Adaptive authentication techniques are most powerful when layered together + You can achieve: – Greater analysis and control of authentication – Balance between security and a better user experience + Preventative methods are failing, but you can tighten the net around attackers
- 21. Q&A
- 22. Find out more about Adaptive Authentication at www.secureauth.com/Product/Adaptive-Authentication.aspx
- 23. The intellectual content within this document is the property of SecureAuth and must not be shared without prior consent.