Implementing a large-scale identity theft prevention solution using the cloud

No ratings

Presented at LASCON 2014 by

Kunal Anand

User identity theft, session hijacking and Man-in-the-Middle (MitM) attacks are some of the most serious threats faced by enterprises and are extremely challenging for security and development teams to overcome. Prevoty has architected and developed a distributed platform on top of AWS cloud infrastructure that has the capability to generate, validate and manage the state of cryptographic tokens on a large scale. In this talk, we will provide an overview of the polyglot architecture of our stack, including custom caching and queuing technologies, as well as an in-depth look at how the platform makes use of SQS, DynamoDB, RDS and EC2. We will also cover strategies employed to improve resiliency and business continuity, such as A/Z and region failover.