Cyber Defense eMagazine December Edition for 2021

More documents

Recommendations

Info

Will Multi-Factor Authentication (MFA) Implementation Protect Countries from Cybercriminals? By Marcin Szary, CTO and co-founder, Secfense American Login.gov service, the UK National Health Services Login application, the Czech DNS registry, the Swedish educational system eduID. These are just a few of many government applications from around the world, whose security is now protected by Multi-Factor Authentication (MFA). More and more heads of states, including the president of the United States Joe Biden, are calling for the implementation of MFA. Will this step protect countries from cybercriminals? The popularity of MFA, i.e. the use of an additional component when logging in to the application (a one time code, cryptographic U2F key or other form of additional authentication) grows noticeably. Cybercriminals don’t waste their time, and fast digitalization of everyday life only makes things better for them. We buy online more and more often, so the number of online transactions is growing. Enterprises are investing in cloud technologies, businesses are moving to the virtual world. This stimulates the audacity of cybercriminals, which in turn pushes governments into introducing stricter and stronger cybersecurity regulations. Today, the need to protect against cyberattacks is not an extra consciousness, but simply a necessity. Cyber Defense eMagazine – December 2021 Edition 72 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
How does this relate to MFA? Well, multi-factor authentication ensures that the person sitting on the other side of the monitor is exactly who they say they are. By implementing MFA, organizations can secure their data so it cannot be accessed by any bad actor who has stolen logins and passwords. The technology giants have known about it for years. The recent research shows that the global size of the MFA market will grow from USD 11.1 billion in 2021 to USD 23.5 billion by the end of 2026. However, many companies have previously recognized the pressing need for global MFA adoption in their organizations. Facebook, Google and Twitter were the first to implement this technology. Another, such as CA Technologies, Vasco Data Security International, RSA Security LLC or Symantec Corporation, anticipating in 2016, the growth of the market, just then began large investments in research and development in this area. My way or the highway There is no need to convince anyone about the effectiveness of MFA as the technology giants have already battle tested it. Google corporation has kept 85K employees from getting phished since 2017. A recent declaration proving that MFA is the ‘must have’, comes from Mark Risher, Sr Director of Product Management at Google. On May 6 2021, he informed the media that soon Google account holders will be forced to use multi- factor authentication if they still want to use the company's services. And you can't be surprised at all because, today no company network is no longer a secure castle that cannot be accessed by outsiders. On the contrary - the growing number of applications in the cloud, working from home and from unsecure networks means that every person who appears in our network must be treated as an intruder. This approach is called the zero trust security model where the key to effective data protection is making sure we know who the person sitting on the other side of the screen is. Without this certainty, no security measures are effective. A Google study found that simply adding a recovery phone number to an account prevents nearly 100% of automated bots attacks, 99% of mass phishing attacks, and 66% of targeted attacks. Too expensive, too hard So why is MFA - considered by experts to be one of the most effective methods of protecting the user against identity theft - yet still used on a handful of applications and not organization-wide? The main problem with the widespread adoption of MFA in public organizations and institutions is the complexity and costs. The implementation of multi-factor authentication throughout the entire organization, requires a lot of capital and time. The highly heterogeneous IT environments, to which it is difficult to match the right tools, are also a big obstacle. One of the approaches to cybersecurity is the user access security broker approach which simply adds MFA between the application and the user. The security broker is placed as an intermediary layer that blends into the application, giving full control not only over the authentication phase, but over the entire user session. Importantly, such action does not require any programming work. It frees from the vendor Cyber Defense eMagazine – December 2021 Edition 73 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
9 Ways Social Media Sabotages Your
Page 3 and 4:
How Do You Secure the Modern Supply
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
Cyber Defense eMagazine - December
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22: Cyber Defense eMagazine - December
Page 39 and 40: With over 4 billion users, social m
Page 41 and 42: Unsecure Mobile Networks When using
Page 43 and 44: However, as concerning as these pra
Page 45 and 46: Danny Lopez, CEO, Glasswall “Duri
Page 47 and 48: estoring data. Modern organizations
Page 49 and 50: When Diplomacy, Finance and Tech Co
Page 51 and 52: Another way leaders can take initia
Page 53 and 54: How Covid-19 Changed Advertising Fo
Page 55 and 56: However, this shift might not be su
Page 57 and 58: Why MFA Alone Isn’t Enough for Tr
Page 59 and 60: just highlights how vulnerable most
Page 61 and 62: on channels like email. This starts
Page 63 and 64: 3 Best Practices to Avoid Inevitabl
Page 65 and 66: For example, an employee may become
Page 67 and 68: and outcomes is essential for proje
Page 69 and 70: Electric Vehicle Charging: The Next
Page 71: Going forward, EV dealers, charging
Page 75 and 76: constant exposure of countries to a
Page 77 and 78: Why do you need a malware sandbox?
Page 79 and 80: Multi-Cloud Security and Compliance
Page 81 and 82: If security controls are not consol
Page 83 and 84: How Do You Secure the Modern Supply
Page 85 and 86: The case for isolation Supply chain
Page 87 and 88: Don’t Take Yourself Out of The Ga
Page 89 and 90: The U.S. Government Accountability
Page 91 and 92: assessment criteria for the tasks f
Page 93 and 94: the file. This was a great techniqu
Page 95 and 96: the wake of the pandemic where the
Page 97 and 98: Certain communications are protecte
Page 99 and 100: At Salt Communications we work with
Page 101 and 102: And it’s only getting worse. If y
Page 103 and 104: The benefits are great When HDOs ha
Page 105 and 106: 4 Pillars of Privacy-Preserving AI
Page 107 and 108: concern and a desire to be cautious
Page 109 and 110: and stay safe online. That’s why
Page 111 and 112: 2. Enabling over-the-horizon threat
Page 113 and 114: Techniques Used by Hackers to Bypas
Page 115 and 116: Phishing scams avoid email security
Page 117 and 118: ATO Detection Account takeover bene
Page 119 and 120: How To Protect Your Digital Legacy
Page 121 and 122: I worked with cybersecurity experts
Page 123 and 124:
Sextortion Email Scams What to Do a
Page 125 and 126:
Sextortion attacks are a type of cy
Page 127 and 128:
How to respond to a sextortion emai
Page 129 and 130:
Example 2:'You've been hacked' emai
Page 131 and 132:
How can this strategy be implemente
Page 133 and 134:
Surviving The New Era of Terabit-Cl
Page 135 and 136:
accompanying shift toward more digi
Page 137 and 138:
Survey results show businesses are
Page 139 and 140:
Enterprises Cannot Achieve Zero Tru
Page 141 and 142:
Capital One breach back in 2019. Ad
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
CyberDefense.TV now has 200 hotseat
Page 163 and 164:
Books by our Publisher: https://www
Page 165 and 166:
Page 167 and 168:
show all

Cyber Defense eMagazine December Edition for 2021

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?