Evaluate

Two Factor and Multifactor Authentication Strategies

• Evaluate biometric authentication pros and cons, implications

  Hoping for a passwordless future? Multifactor authentication using biometrics may be the answer. Consider biometric authentication's pros, cons and implications before deploying. Continue Reading

• Analyzing the top 2019 data breach disclosures: Hindsight in 2020

  Make 2020 the year your company keep its resolution to avoid a data breach. Experts offer lessons learned from the top 2019 data breaches to help stay secure in the year ahead. Continue Reading

• The benefits of IAM can far outweigh the costs

  Identity and access management is a critical piece of enterprise information security. But the benefits of IAM go beyond illuminating who -- and what -- might be using your network. Continue Reading

• Why are fewer companies using SMS 2FA for authentication?

  Instead of SMS two-factor authentication, some companies are switching to 2FA through messaging apps and social media platforms. Learn what's behind this authentication trend. Continue Reading

• Multifactor authentication methods, use cases and products

  Protect your organization from financial and client loss with multifactor authentication tools that keep your company safe from potential cyberattacks. Continue Reading

• Explore multifactor authentication products in-depth

  Discover some of the best multifactor authentication products currently on the market based on target industry and main features to help you make a final buying decision.Continue Reading

• Compare the top multifactor authentication vendors

  What makes a multifactor authentication tool right for an enterprise? This article compares four of the leading multifactor authentication vendors and reviews their products.Continue Reading

• Three examples of multifactor authentication use cases

  When evaluating the business case for multifactor authentication, an organization must first identify how these three operational scenarios apply to a potential implementation.Continue Reading

• Purchasing multifactor authentication tools: What to consider

  Find out what you need to know before investing in a multifactor authentication tool, including the drawbacks and the benefits.Continue Reading

• Exploring multifactor authentication benefits and technology

  Take a look at multifactor authentication benefits and methods, as well as how the technologies have evolved from key fobs to smartphones, mobile devices and the cloud.Continue Reading

• Key customer identity access management features to consider

  Evaluating customer identity access management products is complicated but necessary. Learn what’s new and what you need most right now.Continue Reading

• CIAM vs. IAM: The key differences 'customer' makes

  Find out everything you need to know about the nuances that differentiate customer IAM from traditional IAM so that you can implement the CIAM system at your organization.Continue Reading

• How to find the best privileged identity management tool

  To ensure IT security means first realizing that elevated privileges can also be an open door for hackers. Locking things down requires teamwork, good tools and more.Continue Reading

• Weighing privileged identity management tools' pros and cons

  Products that help security pros manage access privileges are essential to IT security. Learn how to evaluate market offerings and acquire the best for your company.Continue Reading

• Bypassing facial recognition: The means, motive and opportunity

  Researchers bypassed Apple's facial recognition authentication program, Face ID, in under a week. Expert Michael Cobb explains why it's not a major cause for concern for users.Continue Reading

• Advanced Protection Program: How has Google improved security?

  Google added a layer to its account security system with Advanced Protection Program. Matt Pascucci explains how individuals can better defend themselves from malicious actors.Continue Reading

• How does the Microsoft Authenticator application affect password use?

  The Microsoft Authenticator application enables smartphone-based, two-factor authentication and attempts to reduce the use of passwords. Expert Matthew Pascucci explains how.Continue Reading

• How does Facebook's Delegated Recovery enable account verification?

  Facebook's Delegated Recovery aims to replace knowledge-based authentication with third-party account verification. Expert Michael Cobb explains how this protocol works.Continue Reading

• Okta Adaptive MFA gives companies flexible authentication

  Okta Adaptive MFA offers businesses a range of flexible authentication methods that use different contexts to determine which factors provide users with access.Continue Reading

• RSA Authentication Manager offers a variety of authentication methods

  With authentication methods ranging from risk-based to tokens, RSA Authentication Manager gives companies a number of ways to employ multifactor authentication.Continue Reading

• Summing up Symantec VIP Service, a multifactor authentication tool

  Expert David Strom looks at the Symantec VIP multifactor authentication product and how it can benefit enterprise security.Continue Reading

• An in-depth look at Gemalto's SafeNet Authentication Service

  Expert David Strom provides an in-depth look at Gemalto's SafeNet Authentication Service, a SaaS-based multifactor authentication product for boosting login security.Continue Reading

• SecureAuth IdP: An overview of its multifactor authentication ability

  Expert David Strom looks at how SecureAuth IdP uniquely combines multifactor authentication and single sign-on login capabilities in a single product.Continue Reading

• VASCO IDENTIKEY Authentication Server and a look at its key features

  Expert David Strom takes a closer look at VASCO's IDENTIKEY Authentication Server, one of the leading multifactor authentication products on the market.Continue Reading

• Quest Defender protects businesses with two-factor authentication

  Through the Defender Management Portal, Quest Defender lets users request hard and soft tokens to provide valuable two-factor authentication and monitor all token activity.Continue Reading

• CA Strong Authentication offers businesses low-cost MFA and 2FA

  CA Strong Authentication brings inexpensive multi- and two-factor authentication to businesses looking to protect mobile applications and devices and to prevent identity theft.Continue Reading

• Single sign-on service requires a cloud-era update

  The best SSO today can handle the apps mobile workers use, identity as a service and more. Learn to make single sign-on, and other approaches, more effective.Continue Reading

• The best SSO for enterprises must be cloud and mobile capable

  The best SSO today can handle the apps mobile workers use, identity as a service and more. Learn to make single sign-on, and other identity management approaches, more effective.Continue Reading

• Enterprise SSO: The promise and the challenges ahead

  It was inevitable that enterprise SSO would encounter the cloud. Learn how to adjust your company's approach to single sign-on so it keeps working well.Continue Reading

• FIDO authentication standard could signal the passing of passwords

  The FIDO authentication standard could eventually bypass passwords, or at least augment them, as government and industry turns to more effective authentication technologies.Continue Reading

• What new NIST password recommendations should enterprises adopt?

  NIST is coming up with new password recommendations for the U.S. government. Expert Michael Cobb covers the most important changes that enterprises should note.Continue Reading

• How identity management systems strengthen cybersecurity readiness

  Identity management is a core component of cybersecurity readiness, but there are many layers and complexities behind it. Expert Peter Sullivan explains the basics of IAM.Continue Reading

• Is a no-SMS 2FA policy a good idea for enterprises?

  Now that NIST has deprecated the use of SMS 2FA, should nongovernment organizations follow suit? Expert Mike Chapple discusses the risks of SMS-based 2FA to enterprises.Continue Reading

• Muddy waters for chip and PIN technology, banks won't sign off

  The banks and the retailers have divergent views on how best to secure credit card transactions. Will the courts decide between signatures and PINs? Or will market forces win out?Continue Reading

• How does the Mazar malware take control of Android devices?

  The Mazar malware can wipe an entire Android device once it has been installed. Expert Nick Lewis explains how this malware works, and how attacks can be prevented.Continue Reading

• How can Kerberos protocol vulnerabilities be mitigated?

  Microsoft's Kerberos protocol implementation has long-standing issues with its secret keys. Expert Michael Cobb explains how to mitigate the authentication vulnerabilities.Continue Reading

• What's the difference between two-step verification and 2FA?

  The terms two-step verification and two-factor authentication are used interchangeably, but do they differ from one another? Expert Michael Cobb explains.Continue Reading

• How to buy multifactor authentication tools

  Multifactor authentication (MFA) is a security technology that takes something that end users possess, such as a security token ...Continue Reading

• How does tokenization technology affect PCI DSS compliance?

  Tokenization technology can be confusing. Expert Mike Chapple explains what the difference is between two types of tokens and how tokenization can help with PCI DSS compliance.Continue Reading

• The FIDO authentication framework: What do enterprises need to know?

  Enterprises need a full understanding of the FIDO authentication framework before switching to its technology. Expert Randall Gamby looks at the most important points of the UAF.Continue Reading

• Is third-party vendor management the next IAM frontier?

  Identity and access management deployments are notoriously complex. And things are getting worse as legacy technology meets next-generation applications. As the traditional network perimeter continues to disappear, robust IAM becomes more important ...Continue Reading

• Which authentication method is better: 2FA or MFA?

  Which authentication method is better for securing enterprise devices and systems: two-factor authentication or multifactor authentication?Continue Reading

• Is third-party access the next IAM frontier?

  Identity and access management of employees is so complex that many companies have faltered when it comes to securing programs for trusted partners.Continue Reading

• Can simple photography beat biometric systems?

  Simple photography cracking biometric systems highlights the need for two-factor authentication in enterprises according to expert Randall Gamby.Continue Reading

• What does bimodal IAM mean for user credentials?

  Bimodal IAM may be a new term, but this new way to use user credentials should probably already be in practice among secure organizations.Continue Reading

• What do organizations need to know about the final FFIEC guidance?

  The final FFIEC guidance covers a wide range of security subjects, but there are specific takeaways regarding authentication that enterprises should pay attention to.Continue Reading

• Multifactor authentication: A buyer's guide to MFA products

  In this SearchSecurity buyer's guide, learn how to evaluate and procure the right multifactor authentication product for your organization.Continue Reading

• The evolution of MFA security tokens

  Tokens secure IT software and services by serving as additional factors. This slideshow takes a look back at the humble beginnings of MFA technology and how well security tokens now secure enterprise IT assets.Continue Reading

• The top multifactor authentication products

  Multifactor authentication can be a critical component of an enterprise security strategy. Here's a look at the top MFA products in the industry.Continue Reading

• Game-changing enterprise authentication technologies and standards

  This Security School explores next-generation authentication technologies, standards and methods that may soon replace the personal-password system.Continue Reading

• How is Internet authentication changing?

  You've reviewed the webcast, tip and podcast. So: Are you ready for the way Internet authentication practices will be changing? Take this quiz and see.Continue Reading

• New authentication technologies can help boost online success

  What authentication technologies make logging in both simple and secure, for customers and companies? This podcast explores authentication techniques that can boost sales and security.Continue Reading

• Will online authentication ever be free of passwords?

  Will online authentication ever be password-free? The webcast reviews the problems of online authentication and considers a passwordless future.Continue Reading

• KeePass tutorial: Using the free password-management tool

  Video: Learn how to use KeePass, the free password-management tool that can offer cash-strapped enterprises a way to help employees encrypt and secure their work-related passwords.Continue Reading

• Security Readers' Choice 2014: Best enterprise authentication products

  The market leaders in the enterprise authentication category faced stiff competition this year from some noteworthy upstarts.Continue Reading

• 2014 Information Security Readers' Choice Winners

  The votes are tallied. The readers have spoken. Information Security is honoring readers’ picks for the best security hardware, appliances and services in our ninth-annual Readers’ Choice Awards.Continue Reading

• SlickLogin acquisition: A game changer for Google and 2FA industry?

  Google's recent acquisition of two-factor authentication vendor StickLogin could push it ahead in the secure identity management industry.Continue Reading

• Password-free authentication: Figuring out FIDO

  Will open FIDO standards for better interoperability of next-generation authentication technologies actually work?Continue Reading

• Figuring out FIDO as the first products emerge

  The Fast Identity Online (FIDO) standards reached the public draft stage in February, and the first deployments of FIDO-ready technologies followed in April. As industry players such as Google, Microsoft and RSA work on stronger authentication ...Continue Reading

• In dog days of enterprise authentication, can FIDO Alliance help?

  Enterprise authentication practices are plagued with problems. IAM expert Michele Chubirka examines whether the FIDO Alliance can offer solutions.Continue Reading

• Best of authentication 2013

  Readers vote for the top authentication products in 2013: Digital identity verification products, services and management systems.Continue Reading

• Alternatives to passwords: Replacing the ubiquitous authenticator

  As the relative security of passwords falters, are they destined for obscurity?Continue Reading

• Ezzie Schaff: Fighting online fraud requires delicate balance

  Countermeasures for thwarting Internet fraudsters must be balanced with customer service.Continue Reading

• Technologies to thwart online banking fraud

  Today's anti-fraud technologies create gated communities for online banking.Continue Reading

• Knowledge-based authentication poses privacy issues

  Knowledge-based authentication helps catch fraud, but the authentication technology poses customer privacy issues.Continue Reading

• Two-factor authentication, vigilance foil password theft

  Password stealing Trojans, keyloggers and other malware are reaping account credentials by the thousands forcing some to rethink password policies and develop new defenses.Continue Reading

• The pros and cons of implementing smart cards

  Most infosec pros agree that smart cards create a higher level of enterprise security than passwords alone. Learn how to weigh the pros and cons of smart cards to know if they're right for your enterprise?Continue Reading

• Risk management must include physical-logical security convergence

  If your organization is serious about managing risk and total asset protection, then physical-logical convergence is a necessary step.Continue Reading

• Changing times for identity management

  Identity management technology is adapting to meet enterprise needs. Learn what products can improve security and ease compliance.Continue Reading

• Embedded smart card chips are open to hack attacks

  Using power analysis attacks, including Simple Power Analysis, hackers can attack the embedded microchips inside smart cards.Continue Reading

• Address Authentication and Transaction Validation Protocols to Stem Identity Theft

  Layer8: Tarnishing Good NamesContinue Reading

• SaaS Offering Handles SSO

  TechFocus: New Password Hell?Continue Reading

• Identity Management Suites Enable Integration, Interoperability

  IDENTITY MANAGEMENT Feature-rich product suites are putting a face on integration and interoperability.Continue Reading

• Secure Computing SafeWord 2008 product review

  Secure Computing SafeWord 2008 delivers identity management and access control for Windows systems using tokens that generate secure single-use passcodes. Information Security magazine reviews these capabilities.Continue Reading

• How do anonymous credentials and selective disclosure certificates affect enterprise IAM?

  In this expert response, security pro Joel Dubin defines anonymous credentials and selective disclosure certificates, explains how they work and unveils how these two factors can affect enterprise IAM.Continue Reading

• Interview: CISO explains enterprise's access control policies

  Access control and authentication isn't as simple as setting up user IDs and passwords.Continue Reading

• What are the pros and cons of using keystroke dynamic-based authentication systems?

  In this SearchSecurity.com Q&A, security pro Joel Dubin discusses the positive and negative aspects of using keystroke dynamic-based authentication systems.Continue Reading

• Logical, physical security integration challenges

  Integrating physical and IT security can reap considerable benefits for an organization, including enhanced efficiency and compliance plus improved security. But convergence isn't easy. Challenges include bringing the physical and IT security teams ...Continue Reading

• Authentication: MXI Security's Stealth MXP

  MXI Security's Stealth MXPContinue Reading

• Beyond HIPAA and GLBA: New mandates push strong authentication

  Most organizations are familiar with HIPAA, GLBA and SOX, but newer regulations are pushing certain industry sectors to adopt strong authentication.Continue Reading

• User authentication options: Using two factor authentication for security

  Discover how using two-factor authentication can improve organizational security. Weigh your authentication options and choose the right product for your enterprise.Continue Reading

• Three Pitfalls to Avoid

  SPECIAL Managing identity and access can be as easy as 1, 2, 3.
  3 strikes, you're outContinue Reading

• Authentication: RSA SecurID Appliance 2.0

  RSA SecurID Appliance 2.0Continue Reading

• The pros and cons of PKI and two-factor authentication methods

  There are myriad authentication methods to choose from today; learn the pros and cons of two such methods, Public Key Infrastructures and two-factor authentication systems, and how each system helps validate user identities, in this identity and ...Continue Reading

• Access Security

  KoolSpan's SecurEdgeContinue Reading

• Cheat sheet: Access management solutions and their pros and cons

  A cheat sheet of the most common access solutions with a brief description, and their risks and pros and cons to help you choose the solution that is right for your organization.Continue Reading

• Authentication: TriCipher Armored Credential System v3.1.1

  TriCipher's TACS v3.1.1Continue Reading

• Authentication: RSA SecurID 6.0 for Windows

  RSA Security's SecurID 6.0 for WindowsContinue Reading

• Examining device-based authentication

  Combining device-based authentication technology with existing user-based authentication would be appealing for many organizations, but technical details remain unclear.Continue Reading

• Smart cards: Will security help the U.S. get on track with the rest of the world?

  Despite the country's impressive 45% growth in smart card use in 2001, the United States still lags far behind Asia and Europe in the use of the technology. Other countries have already deployed smart cards for banking, telecommunications and, soon,...Continue Reading

• Where's the business smart card explosion?

  The U.S. has been slow to migrate to the smart card, which Europe and Asia have already adopted. Yet its functionality is becoming more practical and attractive to enterprises.Continue Reading