CRESTCon Europe 2024 - Avoiding an Identity Crisis - Jonathan Sword скачать в хорошем качестве

CRESTCon Europe 2024 - Avoiding an Identity Crisis - Jonathan Sword

Multi Factor Authentication (MFA) is often seen as the solution to verifying a user’s identity. The guidance of “Enable MFA” is etched into all our brains as the defence against attacks using compromised credentials. But does MFA really defend us or are we just focusing on a single part of the challenge and ignoring the bigger picture? Maybe the questions we’re asking about verifying a user’s identity aren’t the right ones. This presentation will cover an introduction to the types of MFA used, including how threat actors both avoid and bypass them, as well as how MFA itself can provide an attack surface. It will include thoughts on what questions MFA is answering and how to overcome identity challenges in organisations. All without needing the latest AI powered, buzzword laden products.