Identity & Access Management: Page


  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Google: 2-step verification led to 50% fewer account hacks

    Google auto-enrolled more than 150 million users into two-step verification last October and mandated two-step verification for 2 million-plus YouTube accounts.

    By Alexander Culafi • Feb. 9, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Expert Advice // Is passwordless authentication ready for the enterprise?

    How to start implementing passwordless authentication today

    Everyone is tired of passwords, but a truly passwordless world isn't quite there yet. Learn what options companies currently have to implement passwordless authentication.

    By • Jan. 21, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    access log

    An access log is a list of all requests for individual files -- such as Hypertext Markup Language files, their embedded graphic images and other associated files that get transmitted -- that people or bots have made from a website.

    By Andrew Zola • Jan. 4, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    smart card

    A smart card is a physical card that has an embedded integrated chip that acts as a security token.

    By Michael Cobb, Ben Lutkevich, Linda Rosencrance • Dec. 29, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Expert Advice // API security requires strong API authentication

    4 API authentication methods to better protect data in transit

    The API attack surface isn't always well protected. Learn about the authentication methods your company can use to secure its APIs.

    By • Dec. 14, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    password salting

    Password salting is a technique to protect passwords stored in databases by adding a string of 32 or more characters and then hashing them.

    By • Dec. 13, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Is passwordless authentication ready for the enterprise?

    Is a passwordless future getting closer to reality?

    Industry analysts offer predictions on the future of passwordless authentication and whether we'll ever truly get rid of one of security's weakest links.

    By Kyle Johnson • Dec. 8, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    biometric payment

    Biometric payment is a point-of-sale (POS) technology that uses biometric authentication physical characteristics to identify the user and authorize the deduction of funds from a bank account.

    By Katie Terrell Hanna • Dec. 7, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Is passwordless authentication ready for the enterprise?

    Passwordless authentication issues to address before adoption

    The technology for passwordless authentication exists, but challenges remain. Companies must grapple with differing use cases, legacy software, adoption costs and more.

    By Kyle Johnson • Dec. 6, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Opinion

    Enterprise password security guidelines in a nutshell

    In this concise guide to passwords, experts at Cyber Tec outline the security problems that put enterprises at risk and offer answers on how to solve them.

    By Cyber Tec Security • Nov. 30, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Ultimate guide to secure remote access

    This comprehensive secure remote access guide outlines the strategies, tools and best practices to provide anywhere access while protecting data, systems and users.

    By Sandra Gittlen • Nov. 24, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart)

    A CAPTCHA is a type of challenge-response system designed to differentiate humans from robotic computer programs.

    By Katie Terrell Hanna, Linda Rosencrance • Nov. 16, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    MVSP: Will Google’s security baseline work?

    In response to data breaches involving third-party vendors, Google worked alongside vendors to developed what it refers to as a 'vendor-neutral security baseline.'

    By Arielle Waldman • Nov. 5, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Expert Advice // How to address hybrid workforce security

    Adopt 5 best practices for hybrid workplace model security

    As hybrid workforce models become the norm due to the pandemic, enterprises should look to best practices to ensure secure unified access for on-premises and WFH employees.

    By Johna Johnson • Nov. 1, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Digital Signature Standard (DSS)

    The Digital Signature Standard (DSS) is a digital signature algorithm (DSA) developed by the U.S. National Security Agency (NSA) as a means of authentication for electronic documents.

    By Katie Terrell Hanna • Oct. 27, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    How to use Python for privilege escalation in Windows

    Penetration testers can use Python to write scripts and services to discover security vulnerabilities. In this walkthrough, learn how to escalate privileges in Windows.

    By No Starch Press, Kyle Johnson • Oct. 25, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    RADIUS (Remote Authentication Dial-In User Service)

    RADIUS (Remote Authentication Dial-In User Service) is a client-server protocol and software that enables remote access servers to communicate with a central server to authenticate dial-in users and authorize their access to the requested system or service.

    By Peter Loshin • Sept. 30, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CHAP (Challenge-Handshake Authentication Protocol)

    CHAP (Challenge-Handshake Authentication Protocol) is a challenge and response authentication method that Point-to-Point Protocol (PPP) servers use to verify the identity of a remote user.

    By Peter Loshin • Sept. 29, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Autodiscover flaw in Microsoft Exchange leaking credentials

    Guardicore found that exploiting a design flaw in Autodiscover allowed it to capture more than 372,000 Windows domain credentials and nearly 97,000 unique application credentials.

    By Alexander Culafi • Sept. 23, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    digital certificate

    A digital certificate, also known as a public key certificate, is used to cryptographically link ownership of a public key with the entity that owns it.

    By Peter Loshin, Mary Shacklett • Sept. 23, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    key fob

    A key fob is a small, programmable device that provides access to a physical object.

    By Diana Hwang, Rahul Awati • Sept. 21, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    shadow password file

    A shadow password file, also known as /etc/shadow, is a system file in Linux that stores encrypted user passwords and is accessible only to the root user, preventing unauthorized users or malicious actors from breaking into the system.

    By • Sept. 16, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Expert Advice

    Blockchain for identity management: Implications to consider

    Blockchain has changed the way IAM authenticates digital identities. Consider these 14 implications when asking how and where IAM can benefit your organization.

    By Jessica Groopman • Sept. 1, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    nonrepudiation

    Nonrepudiation ensures that no party can deny that it sent or received a message via encryption and/or digital signatures or approved some information.

    By • Aug. 20, 2021
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Opinion

    3 steps to create a low-friction authentication experience

    Passwords are no longer sufficient, but more secure authentication methods frustrate users. Explore how to create a low-friction authentication process for improved UX and trust.

    By Tricia Phillips • Aug. 5, 2021