Identity & Access Management: Page
-
Google: 2-step verification led to 50% fewer account hacks
Google auto-enrolled more than 150 million users into two-step verification last October and mandated two-step verification for 2 million-plus YouTube accounts.
By Alexander Culafi • Feb. 9, 2022 -
Expert Advice // Is passwordless authentication ready for the enterprise?
How to start implementing passwordless authentication today
Everyone is tired of passwords, but a truly passwordless world isn't quite there yet. Learn what options companies currently have to implement passwordless authentication.
By Ashwin Krishnan • Jan. 21, 2022 -
access log
An access log is a list of all requests for individual files -- such as Hypertext Markup Language files, their embedded graphic images and other associated files that get transmitted -- that people or bots have made from a website.
By Andrew Zola • Jan. 4, 2022 -
smart card
A smart card is a physical card that has an embedded integrated chip that acts as a security token.
By Michael Cobb, Ben Lutkevich, Linda Rosencrance • Dec. 29, 2021 -
Expert Advice // API security requires strong API authentication
4 API authentication methods to better protect data in transit
The API attack surface isn't always well protected. Learn about the authentication methods your company can use to secure its APIs.
By Andrew Froehlich • Dec. 14, 2021 -
password salting
Password salting is a technique to protect passwords stored in databases by adding a string of 32 or more characters and then hashing them.
By Rahul Awati • Dec. 13, 2021 -
Is passwordless authentication ready for the enterprise?
Is a passwordless future getting closer to reality?
Industry analysts offer predictions on the future of passwordless authentication and whether we'll ever truly get rid of one of security's weakest links.
By Kyle Johnson • Dec. 8, 2021 -
biometric payment
Biometric payment is a point-of-sale (POS) technology that uses biometric authentication physical characteristics to identify the user and authorize the deduction of funds from a bank account.
By Katie Terrell Hanna • Dec. 7, 2021 -
Is passwordless authentication ready for the enterprise?
Passwordless authentication issues to address before adoption
The technology for passwordless authentication exists, but challenges remain. Companies must grapple with differing use cases, legacy software, adoption costs and more.
By Kyle Johnson • Dec. 6, 2021 -
Opinion
Enterprise password security guidelines in a nutshell
In this concise guide to passwords, experts at Cyber Tec outline the security problems that put enterprises at risk and offer answers on how to solve them.
By Cyber Tec Security • Nov. 30, 2021 -
Ultimate guide to secure remote access
This comprehensive secure remote access guide outlines the strategies, tools and best practices to provide anywhere access while protecting data, systems and users.
By Sandra Gittlen • Nov. 24, 2021 -
CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart)
A CAPTCHA is a type of challenge-response system designed to differentiate humans from robotic computer programs.
By Katie Terrell Hanna, Linda Rosencrance • Nov. 16, 2021 -
MVSP: Will Google’s security baseline work?
In response to data breaches involving third-party vendors, Google worked alongside vendors to developed what it refers to as a 'vendor-neutral security baseline.'
By Arielle Waldman • Nov. 5, 2021 -
Expert Advice // How to address hybrid workforce security
Adopt 5 best practices for hybrid workplace model security
As hybrid workforce models become the norm due to the pandemic, enterprises should look to best practices to ensure secure unified access for on-premises and WFH employees.
By Johna Johnson • Nov. 1, 2021 -
Digital Signature Standard (DSS)
The Digital Signature Standard (DSS) is a digital signature algorithm (DSA) developed by the U.S. National Security Agency (NSA) as a means of authentication for electronic documents.
By Katie Terrell Hanna • Oct. 27, 2021 -
How to use Python for privilege escalation in Windows
Penetration testers can use Python to write scripts and services to discover security vulnerabilities. In this walkthrough, learn how to escalate privileges in Windows.
By No Starch Press, Kyle Johnson • Oct. 25, 2021 -
RADIUS (Remote Authentication Dial-In User Service)
RADIUS (Remote Authentication Dial-In User Service) is a client-server protocol and software that enables remote access servers to communicate with a central server to authenticate dial-in users and authorize their access to the requested system or service.
By Peter Loshin • Sept. 30, 2021 -
CHAP (Challenge-Handshake Authentication Protocol)
CHAP (Challenge-Handshake Authentication Protocol) is a challenge and response authentication method that Point-to-Point Protocol (PPP) servers use to verify the identity of a remote user.
By Peter Loshin • Sept. 29, 2021 -
Autodiscover flaw in Microsoft Exchange leaking credentials
Guardicore found that exploiting a design flaw in Autodiscover allowed it to capture more than 372,000 Windows domain credentials and nearly 97,000 unique application credentials.
By Alexander Culafi • Sept. 23, 2021 -
digital certificate
A digital certificate, also known as a public key certificate, is used to cryptographically link ownership of a public key with the entity that owns it.
By Peter Loshin, Mary Shacklett • Sept. 23, 2021 -
key fob
A key fob is a small, programmable device that provides access to a physical object.
By Diana Hwang, Rahul Awati • Sept. 21, 2021 -
shadow password file
A shadow password file, also known as /etc/shadow, is a system file in Linux that stores encrypted user passwords and is accessible only to the root user, preventing unauthorized users or malicious actors from breaking into the system.
By Rahul Awati • Sept. 16, 2021 -
Expert Advice
Blockchain for identity management: Implications to consider
Blockchain has changed the way IAM authenticates digital identities. Consider these 14 implications when asking how and where IAM can benefit your organization.
By Jessica Groopman • Sept. 1, 2021 -
nonrepudiation
Nonrepudiation ensures that no party can deny that it sent or received a message via encryption and/or digital signatures or approved some information.
By Rahul Awati • Aug. 20, 2021 -
Opinion
3 steps to create a low-friction authentication experience
Passwords are no longer sufficient, but more secure authentication methods frustrate users. Explore how to create a low-friction authentication process for improved UX and trust.
By Tricia Phillips • Aug. 5, 2021