Security threats Toolkit

Story: Companies urged to move beyond passwords

• 
• 

Let's be careful to align "cures" with the corresponding problem, because it is by no means self-evident that "two-factor" (or n-factor) authentication measures create a net reduction in risk. Indeed, in many cases authentication ('who you are") presents fewer risks than authorization ("what you can access and do"), and the latter depends on backoffice database accuracy, freshness and fined-grainedness. Also, as identity theft cases highlight, often the "prize" is not one-by-one cracking of passwords, but the wholesale capture of portions of these back office databases (often by authenticated users). Therefore one has to take a holistic view of the overall process before concluding "Rome is Burning."

• 
• 

• 
• 
• 

Full Talkback thread