Identity & Access Management: Page
-
What is identity threat detection and response (ITDR)?
Identity threat detection and response (ITDR) is a collection of tools and best practices aimed at defending against cyberattacks that specifically target user identities or identity and access management (IAM) infrastructure.
By Mary Pratt • Sept. 6, 2024 -
Halliburton cyberattack explained: What happened?
Oil field services provider Halliburton reported on Aug. 23, 2024, that it was the victim of a cyberattack, adding another to the growing list of cyberincidents.
By Sean Kerner • Aug. 28, 2024 -
Expert Advice // Online payment security
How frictionless authentication works in online payments
Online retailers face a challenge: Make the payment process quick and easy for legitimate customers but not for fraudsters. Frictionless authentication can help.
By Rob Shapland , Alissa Irei • Aug. 22, 2024 -
Microsoft to roll out mandatory MFA for Azure
Following several high-profile attacks across the globe on MFA-less accounts, Microsoft will make the security measure mandatory for Azure sign-ins beginning in October.
By Arielle Waldman • Aug. 19, 2024 -
Expert Advice
How invisible MFA works to reduce UX friction
Traditional MFA provides benefits but tests users' patience. Explore how invisible MFA can make it easier to access resources and reduce MFA fatigue.
By Andrew Froehlich , Alissa Irei • Aug. 12, 2024 -
Experts weigh in on Snowflake database MFA features
In response to a wave of recent attacks on customers, Snowflake introduces new authentication offerings that enable administrators to require MFA for all user accounts.
By Alexander Culafi • July 15, 2024 -
Expert Advice
Use these 6 user authentication types to secure networks
One layer of security that all networks and applications need is authentication. Read up on six authentication types, from 2FA to biometrics to certificates.
By Kyle Johnson • July 9, 2024 -
digital signature
A digital signature is a mathematical technique used to validate the authenticity and integrity of a digital document, message or software.
By Ben Lutkevich, Alexander Gillis, Cameron Hashemi-Pour • June 25, 2024 -
OpenID (OpenID Connect)
OpenID Connect is an open specification for authentication and single sign-on (SSO).
By Rahul Awati • June 21, 2024 -
How Amazon’s decision to ditch Active Directory paid off
Amazon's decision to build its own identity and access management system was an expensive one, but an infamous supply chain attack validated the move.
By Rob Wright • June 20, 2024 -
Expert Advice
How deepfakes threaten biometric security controls
Biometric security controls are under attack by deepfakes -- convincing images, videos and audio created by generative AI. But all is not lost. Learn how to mitigate the risk.
By Jerald Murphy • June 17, 2024 -
Opinion // Omdia Analysts' Perspectives
Identiverse 2024: Key takeaways in identity security
The 2024 Identiverse conference addressed identity access management challenges, AI's ability to streamline IAM workflows and nonhuman identity management for identity pros.
By Todd Thiemann • June 12, 2024 -
Mandiant: ‘Exposed credentials’ led to Snowflake attacks
According to new threat research, Mandiant is reporting that UNC5537 conducted attacks against Snowflake database customers at least as early as April 14.
By Alexander Culafi • June 10, 2024 -
Expert Advice
Why it’s SASE and zero trust, not SASE vs. zero trust
When it comes to adopting SASE or zero trust, it's not a question of either/or, but using SASE to establish and enable zero-trust network access.
By Dave Shackleford , Mike Chapple • June 10, 2024 -
Expert Advice
Top 6 benefits of zero-trust security for businesses
The zero-trust security model demands infosec leaders take a holistic approach to IT infrastructure security. Learn about the top six business benefits of zero trust here.
By Andrew Froehlich • May 30, 2024 -
out-of-band authentication
Out-of-band authentication is a type of two-factor authentication (2FA) that requires a secondary verification method through a separate communication channel along with the typical ID and password.
By Nick Barney • May 15, 2024 -
Expert Advice // How to configure and manage sudo commands
How to configure sudo privilege and access control settings
Learn how to use the sudo command for access control configurations, from granting full administrative privileges to delegating roles.
By Damon Garn • May 7, 2024 -
What is role-based access control (RBAC)?
Role-based access control (RBAC) is a method of restricting network access based on the roles of individual users within an enterprise.
By Alexander Gillis, Linda Rosencrance • May 2, 2024 -
Expert Advice
Traditional MFA isn’t enough, phishing-resistant MFA is key
Not every MFA technique is effective in combating phishing attacks. Enterprises need to consider new approaches to protect end users from fraudulent emails.
By Amy DeCarlo • April 24, 2024 -
3 Keycloak authorization strategies to secure app access
Keycloak, an open source IAM tool, offers authorization methods, including RBAC, GBAC and OAuth 2.0, that limit what users can access.
By Packt Publishing, Kyle Johnson • April 18, 2024 -
Opinion // Omdia Analysts' Perspectives
Optimize encryption and key management in 2024
Enterprise Strategy Group research highlighted the encryption challenges enterprises face, including lack of encryption, cryptographic infrastructure inadequacies and more.
By Todd Thiemann • April 18, 2024 -
identity management (ID management)
Identity management (ID management) is the organizational process for ensuring individuals have the appropriate access to technology resources.
By TechTarget Contributor • April 11, 2024 -
Opinion
Identity, data security expectations for RSA Conference 2024
Security practitioners can expect to hear about key issues at this year's RSA Conference, including identity and data security, AI and DSPM.
By Todd Thiemann • April 10, 2024 -
retina scan
Retina scanning is a biometric authentication technology that uses an image of an individual's retinal blood vessel pattern as a unique identifying trait for access to secure installations.
By Andrew Zola • March 29, 2024 -
Expert Advice
Use sudo insults to add spice to incorrect password attempts
The life of an admin doesn't have to be dry. When a user enters a wrong password, for example, why not respond with a message that says, 'You're fired!' With sudo insults, you can.
By Damon Garn • March 27, 2024