Identity & Access Management

Education Level: Intermediate

6414 - Social Login and BYOD—and Their Impact on Authentication Systems

Speaker(s)

• 

  Eric Tuttle

  Senior Identity and Access Management Consultant
  Blue Bay Technologies, Inc.

Trends associated with adopting social login services and bring your own device (BYOD) policies create security vulnerabilities. Device hijacking, identity hijacking, man-in-the-middle and man-on-the-device attacks present very real threats to corporate applications and infrastructure. Emerging technologies can close these vulnerabilities. The concepts of Identity proofing, device signatures, step-up authentication, independent channel authorization and transaction signing will be presented and discussed in real-world scenarios, demonstrating how they can be effectively integrated with existing authentication infrastructure to create new paradigms, efficiently countering these threats.

Learning Objectives:

• Cite current threats to authentication methods, including device hijacking, identity hijacking, man in the middle and man on the device, and how they threaten corporate authentication for applications and infrastructure.
• Understand device and identity proofing and step-up authentication, and how they are being applied to create new, secure paradigms for authentication and attestation.
• Understand how embedding channel-independent signatures in transaction infrastructure provide a more secure approach to security than embedding identity in every component of your infrastructure.