Archive for the ‘Authentication’ Category

Tenable Network Security: Afterbites with Marcus Ranum: Gartner & Two-Factor Authentication

December 17, 2009

Tenable Network Security: Afterbites with Marcus Ranum: Gartner & Two-Factor Authentication: “Tenable Network Security
« Tenable Network Security Podcast – Episode 16 | Main

Afterbites with Marcus Ranum: Gartner & Two-Factor Authentication

Afterbites is a blog segment in which Marcus Ranum provides more in-depth coverage and analysis of the SANS NewsBites newsletter. This week Marcus will be commenting on the following article:

Gartner Report Says Two-Factor Authentication Isn’t Enough
(December 14, 2009)

A report from Gartner says that two-factor authentication is not providing adequate security against fraud and online attacks. Specifically, Trojan-based, man-in-the-middle browser attacks manage to bypass strong two-factor authentication. The problem resides in authentication methods that rely on browser communications. The report predicts that while bank accounts have been the primary target of such attacks, they are likely to spread ‘to other sectors and applications that contain sensitive valuable information and data.’ Gartner analyst Avivah Litan recommends ‘server-b”

(Via .)