Approved for 1 CompTIA CEU: A+, Network+, Security+, and CASP; 1 GIAC CPE
The Password Conundrum
“I was sitting on a flight home after a long week helping customers secure their users identities. I was sitting between two executives, each for different companies. They asked me what I did for a living and the conversation became a discussion about passwords. I jokingly mentioned that a current crisis in user security was occurring. They wanted to know what it was and I responded that many users have so many passwords to remember at work and home that they keep a list of username and password pairs written down on paper under their keyboards or in a spreadsheet on their desktop. They both raised their hands, like naughty school children, and said “That is what I do!! I have a spreadsheet on my desktop.” We went on to discuss how the identity industry is innovating to relieve this crisis for users.” Kelvin Brewer, CISSP, Lead Security Architect, Dell Security Public Sector
The internet has created identity chaos for users, requiring them to remember dozens of unique username and password combinations for all their accounts. This is not a realistic expectation. Some solutions have taken a step in the right direction. Other solutions have created new targets for hackers by providing an illusion of security. The final goal is the total elimination of the password. This presentation will cover:
- The futility of the password, or better said, removing the risk created by password spreadsheets on the desktop.
- Current standards and innovations, in federated identity management, that are reducing passwords for users today.
- Future standards and innovations that could eliminate passwords altogether.
- Which of these standards and innovations will reduce the number of passwords for users today?