Access "USB security tokens may not be as secure as you think"
This article is part of the July 2004 issue of Olympic trials: Securing the summer games
Strong multifactor authentication is crucial for high-security environments. Even strong password policies can fail in the face of cracker tools and users who carelessly share passwords or write them on Post-it notes. USB security tokens give security managers the proverbial "something you have" and "something you know." Further, the token provides secure storage for multiple login credentials, so users need to remember only a single password or PIN to access a VPN, network login, sales and marketing intranet or employee Internet site, making the USB token an attractive authentication solution. Information Security tested tokens from ActivCard, Aladdin Knowledge Systems, Authenex, DataKey (using a SafeNet token) and Griffin Technologies on ease of setup and configuration, administration and the range of supported applications (see "About This Review"). The upshot? Although the tokens themselves are secure, we found disturbing security weaknesses in the client software. Each of the tested tokens has flaws that could allow an intruder or thief to bypass the ... Access >>>
Premium Content for Free.
IT network security: Securing the summer Olympics
by Dennis McCafferty, Contributing Writer
While physical security at the Olympics is paramount, information security for its vast IT network is also a major challenge.
Acceptable use policies will minimize email risks
by George Wrenn, CISSP
Learn why setting comprehensive email acceptable use policies can help minimize email risks and secure your email applications.
How to prevent phishing scams and protect customers
by Nalneesh Gaur
In this tip, Web security guru, Nalneesh Gaur examines how hackers are using phishing scams to exploit financial sectors of the industry, why you should care and what you can do to prevent these attacks.
- IT network security: Securing the summer Olympics by Dennis McCafferty, Contributing Writer
USB security tokens may not be as secure as you think
by Tom Bowers, Contributor
USB tokens aren't as strong as you think. Multifactor authentication is meaningless when the supporting software is insecure.
Will intrusion prevention systems live up the hype?
Will intrusion prevention ever live up to its promise?
- USB security tokens may not be as secure as you think by Tom Bowers, Contributor
The Fulda Gap and defense in depth strategy
Enterprise security managers need to think like warriors when it comes to protecting their systems. Lawrence Walsh explains why.
- The Fulda Gap and defense in depth strategy
More Premium Content Accessible For Free
Despite the enormous concerns around cloud security, many information security professionals remain on the sidelines when it comes to their ...
Not only is modern malware getting more prevalent and sophisticated, it's also now focusing on a broader array of targets. Attackers would still love...
IT Decision Center
Learn how to evaluate your potential vendor's UTM product and its ability to meet your specific business requirements.