Identity & Access Management: Page

How does the PoisonTap exploit bypass password locks on computers?

The PoisonTap exploit can bypass password locks on computers, enabling an attacker to remotely control systems. Expert Nick Lewis explains how the attack works.

By Nick Lewis • April 17, 2017

How does a U2F security key keep Facebook users safe?

Universal second factor devices can be used to strengthen authentication on major websites such as Facebook. Expert Matthew Pascucci explains how U2F works.

By Matthew Pascucci • March 29, 2017

How do identity governance and access management systems differ?

Identity governance and access management systems overlap naturally, but they are still distinct. Expert Matthew Pascucci explains the difference between these two aspects of IAM.

By Matthew Pascucci • March 27, 2017

Google considers options on Symantec certificate authority ‘failures’

Symantec certificate authority cries foul, as Google considers severe options following the company allegedly misissuing as many as 30,000 digital certificates.

By Peter Loshin • March 24, 2017

Enterprise SSO: The promise and the challenges ahead

It was inevitable that enterprise SSO would encounter the cloud. Learn how to adjust your company's approach to single sign-on so it keeps working well.

By Rob Shapland • March 23, 2017

SHA-1 certificates: How will Mozilla’s deprecation affect enterprises?

Mozilla browser users will encounter 'untrusted connection' errors if they use SHA-1 signed certificates. Expert Michael Cobb explains why, and what enterprises can do.

By Michael Cobb • March 6, 2017

SHA-1 deprecation more important after hash officially broken

SHA-1 deprecation in browsers comes as researchers create hash collisions and Google offers website and developer tools to protect against malicious uses.

By Peter Loshin • Feb. 23, 2017

Q&A: Yubico brings FIDO authentication protocol to the masses

Yubico founder and CEO Stina Ehrensvard spoke with SearchSecurity at RSAC 2017 about FIDO authentication and how Google uses it to secure logins and cut costs.

By Peter Loshin • Feb. 16, 2017

Symantec CA report offers more clarity on certificate transparency catch

One week after certificate transparency revealed a Symantec CA improperly issued over 100 digital certificates, Symantec offers more details on the incident.

By Peter Loshin • Jan. 27, 2017

Google creates its own root certificate authority

Google is expanding its certificate authority capabilities by creating its own root certificate authority, but experts are unsure of Google's plans moving forward.

By Michael Heller • Jan. 27, 2017

How improper SSH key management is putting enterprises at risk

In part two of his interview with SearchSecurity, SSH creator Tatu Ylonen explains why proper SSH key management is crucial and how attackers can use lost or exposed keys.

By Rob Wright • Jan. 27, 2017

Gmail phishing campaign uses real-time techniques to bypass 2FA

Researchers saw a Gmail phishing campaign in the wild using clever tricks to access accounts including a difficult 2FA bypass only possible in real time.

By Michael Heller • Jan. 17, 2017

Google Cloud KMS simplifies the key management service, but lacks features

Experts are impressed with the simplicity of Google's Cloud KMS even if it doesn't separate itself from the key management service competition.

By Michael Heller • Jan. 12, 2017

How can two-factor authentication systems be used effectively?

Two-factor authentication systems require more than using codes sent through SMS and smart cards. Expert Michael Cobb explains how to properly and effectively implement 2FA.

By Michael Cobb • Jan. 4, 2017

FIDO authentication standard could signal the passing of passwords

The FIDO authentication standard could eventually bypass passwords, or at least augment them, as government and industry turns to more effective authentication technologies.

By Michael Cobb • Jan. 3, 2017

How to buy digital certificates for your enterprise

In the market to buy digital certificates? Learn exactly how digital certificates work, which features are key and how to evaluate the available options on the market.

By Michael Cobb • Jan. 3, 2017

Can an HTML5 document with a digital signature be authenticated?

A digital signature on an HTML5 document cannot be authenticated the same way a PDF can. Expert Michael Cobb explains how enterprises should address this issue.

By Michael Cobb • Oct. 25, 2016

Preventing privilege creep: How to keep access and roles aligned

Privilege creep can result in the abuse of user access and security incidents. Expert Michael Cobb explains how enterprises can keep user roles and privileges aligned.

By Michael Cobb • Oct. 24, 2016

Strong authentication methods: Are you behind the curve?

Not sure who's really behind that username and password? Google, Facebook and others may finally give multifactor authentication technology the 'push' it needs.

By Dan Sullivan • June 1, 2016

Why signature-based detection isn’t enough for enterprises

Signature-based detection and machine learning algorithms identify malicious code and threats. Expert Michael Cobb explains how both techniques defend networks and endpoints.

By Michael Cobb • May 18, 2016

What’s the difference between two-step verification and 2FA?

The terms two-step verification and two-factor authentication are used interchangeably, but do they differ from one another? Expert Michael Cobb explains.

By Michael Cobb • March 22, 2016

Comparing the best network access control products

Expert Rob Shapland takes a look at the best network access control products on the market today and examines the features and capabilities that distinguish the top vendors in this space.

By Rob Shapland • Feb. 25, 2016

Is third-party access the next IAM frontier?

Identity and access management of employees is so complex that many companies have faltered when it comes to securing programs for trusted partners.

By Michael Cobb • Aug. 3, 2015

Can simple photography beat biometric systems?

Simple photography cracking biometric systems highlights the need for two-factor authentication in enterprises according to expert Randall Gamby.

By Randall Gamby • June 18, 2015

The fundamentals of FDE: The business case for full disk encryption

Expert Karen Scarfone outlines the benefits of FDE to help businesses decide if the storage encryption technology is right for their organization.

By Karen Kent • Nov. 20, 2014