Protecting Against Breached Credentials in Identity Workflows

No ratings

Presented at BSides Las Vegas 2022 by

Mathew Woodyard

Breached credentials are the root of many of the most common identity-based attacks. This talk gives an overview of beloved attacks build on a foundation of leaked passwords like credential stuffing, presents insights from real-world consumer identity and access management (CIAM) log data and proposes mitigation techniques that defenders can employ in their identity workflows.