Identity & Access Management: Page

Verizon DBIR: Stolen credentials led to nearly 50% of attacks

The Verizon 2022 Data Breach Investigations Report revealed enterprises' ongoing struggle with securing credentials and avoiding common mistakes such as misconfigurations.

By Arielle Waldman • May 25, 2022

MFA technology is rapidly evolving -- are mandates next?

The evolving landscapes of both the modern workplace and cyberthreats have paved the way for some organizations to require multifactor authentication protection. Will others join?

By Peyton Doyle • May 24, 2022

Apple, Microsoft, Google expand FIDO2 passwordless support

Achieving true passwordless experiences begins with companies working together to adopt standards that enable customers to use multiple devices seamlessly, regardless of OS.

By Kyle Johnson • May 20, 2022

Small businesses under fire from password stealers

Kaspersky researchers tracked notable increases in password-stealing Trojans, RDP attacks and other cyberthreats against small businesses in various countries.

By Peyton Doyle • May 19, 2022

5 steps to ensure a successful access management strategy

Access management is top of mind for organizations, especially in the hybrid workspace. Follow these five steps to create an access management strategy that benefits all users.

By Michael Kelley • May 17, 2022

Zero trust vs. zero-knowledge proof: What’s the difference?

Zero-knowledge proofs can help companies implement a zero-trust framework. Learn about the two concepts and how they come together to better secure networks.

By Andrew Froehlich • May 12, 2022

Why companies should focus on preventing privilege escalation

If attackers can elevate privileges once inside a system, their access can be unlimited. Discover common privilege escalation techniques and how to mitigate them.

By Kyle Johnson • April 27, 2022

The benefits and challenges of managed PKIs

Managing a public key infrastructure is a difficult task. Discover the benefits and challenges of PKI as a service to determine if managed PKI would benefit your organization.

By Karen Kent • April 14, 2022

Open System Authentication (OSA)

Open System Authentication (OSA) is a process by which a computer could gain access to a wireless network that uses the Wired Equivalent Privacy (WEP) protocol.

By Paul Kirvan • April 7, 2022

How secure are one-time passwords from attacks?

Adding an additional authentication layer makes it harder for attackers to get into accounts, but not all authentication factors are equal -- especially when it comes to OTPs.

By Kyle Johnson • April 6, 2022

AAA server (authentication, authorization and accounting)

An AAA server is a server program that handles user requests for access to computer resources and, for an enterprise, provides authentication, authorization and accounting (AAA) services.

By Andrew Froehlich • April 6, 2022

How to use OpenID Connect for authentication

OpenID Connect has become a trusted protocol to connect with identity providers. Explore how to use it for IAM, common threats to be aware of and how to connect to multiple IdPs.

By Kyle Johnson • April 4, 2022

Luhn algorithm (modulus 10)

The Luhn algorithm, also called modulus 10 or modulus 10 algorithm, is a simple mathematical formula used to validate a user's identification numbers.

By Alexander Gillis • April 4, 2022

CrowdStrike finds ‘logging inaccuracies’ in Microsoft 365

CrowdStrike says Microsoft's cloud offering may not be accurately taking logs of user sign-ins, and that could pose a threat to protecting networks and investigating attacks.

By Shaun Nichols • April 1, 2022

authentication server

An authentication server is an application that facilitates the authentication of an entity that attempts to access a network.

By Katie Terrell Hanna • March 31, 2022

mutual authentication

Mutual authentication, also called two-way authentication, is a process or technology in which both entities in a communications link authenticate each other.

By Paul Kirvan • March 21, 2022

2 zero-trust cloud security models emerge as demands shift

Security teams are beefing up enterprise defenses as cloud services become more essential. Zero trust -- tailored to assets, as well as users -- is an integral part of the equation.

By Dave Shackleford • March 21, 2022

Use digital identity proofing to verify account creation

Validating users during account creation with identity proofing helps prevent data breaches but isn't without challenges. Discover how it works and concerns to address.

By Kyle Johnson • March 4, 2022

How to stop malicious or accidental privileged insider attacks

How many permissions or privileges a user has will affect how big of an insider threat they are. Discover the issues surrounding privileged users and how to curtail these threats.

By Kyle Johnson • March 3, 2022

passphrase

A passphrase is a sentencelike string of words used for authentication that is longer than a traditional password, easy to remember and difficult to crack.

By Laura Fitzgibbons, Andrew Froehlich • Feb. 25, 2022

Shared Key Authentication (SKA)

Shared Key Authentication (SKA) is a process by which a computer can gain access to a wireless network that uses the Wired Equivalent Privacy (WEP) protocol.

By Andrew Zola • Feb. 25, 2022

How to use PKI to secure remote network access

Public key infrastructure is a more secure option than password-based or multifactor authentication. Learn how those benefits can extend to remote employees and access.

By Michael Cobb • Feb. 23, 2022

security clearance

A security clearance is an authorization that allows access to information that would otherwise be forbidden.

By Katie Terrell Hanna • Feb. 16, 2022

Apache Cassandra vulnerability puts servers at risk

Certain non-default configurations of the Apache Cassandra database software could leave the door open for remote code execution attacks, according to JFrog researchers.

By Shaun Nichols • Feb. 16, 2022

Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP)

Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) is an encryption protocol based on the U.S. federal government's Advanced Encryption Standard (AES) algorithm and uses the Counter Mode with CBC-MAC (CCM) mode of operation.

By Rahul Awati • Feb. 11, 2022