Phishing, Man-in-Middle: Making Sense of Strong Authentication

No ratings

Presented at SecureWorldHouston 2019 by

Girish Chirovolu

In this presentation we look at FIDO2 closely, discuss some of the challenges with FIDO, and what sort of attack vectors would be on the horizon when the technology picks up. Further, how would Identity providers need to evolve, especially in the context of federated services and the services consumption model.1. Overview of current strong authentication system attacks and risks.2. What is FIDO? Public-Pvt key adoption on end devices; risks and challenges.3. What is the splintered authentication space evolution — tradeoffs and alternatives.4. Novel solution to MiM as a stand-alone, stop-gap and compliment existing and new FIDO adoption.5. Evolution roadmap