We think you have liked this presentation. If you wish to download it, please recommend it to your friends in any social system. Share buttons are a little bit lower. Thank you!
Presentation is loading. Please wait.
Published byCale Vink
Modified about 1 year ago
Challenges of Identity Fraud Chris Voice, VP Technology
© Copyright Entrust, Inc. 20052 We are Security Specialists… Top 12 security software company with ~ $100M in annual revenues Industry pioneer and leader, with 500 employees and 100+ patents Best in class service and support, and integration for leading technology vendors Strong balance sheet, with significant cash balance and no debt –Publicly-listed (NASDAQ: ENTU)
© Copyright Entrust, Inc. 20053 Definitions Identity TheftIdentity Fraud
© Copyright Entrust, Inc. 20054 Identity Theft Incidents
© Copyright Entrust, Inc. 20055 2005 Major Identity Theft Incidents
© Copyright Entrust, Inc. 20056 ?
8 Source: www.mailfrontier.com
© Copyright Entrust, Inc. 20059 Phishing Reports Received Nov ’04 – Nov ‘05 88% Year over Year Increase
© Copyright Entrust, Inc. 200510 More Complex Attacks
© Copyright Entrust, Inc. 200511 Password Stealing Malicious Code URLs Over 300% in Seven Months
© Copyright Entrust, Inc. 200512 Online Identity Fraud Influencing Consumer Behavior IDC Financial Insights: “…6% admitted to switching banks to reduce their risk of becoming a victim of identity theft.” Forrester: “…14% of online consumers have stopped using online banking and bill pay due to email fraud concerns.”
© Copyright Entrust, Inc. 200513 Online Identity Fraud Influencing Consumer Behavior Gartner: “…nearly 14 percent of them [on-line bankers] have stopped paying bills via online banking." Entrust: “…18% of consumers have decreased or outright stopped doing on-line banking in the last 12 months because of concerns of identity security..”
© Copyright Entrust, Inc. 200514 Driving Legislative Impacts
© Copyright Entrust, Inc. 200515 Legislation Have introduced Data Security Legislation Have Not Introduced Data Security Legislation
© Copyright Entrust, Inc. 200516 Financial Service Mandates FFIEC considers single-factor authentication…to be inadequate for high-risk transactions involving access to customer information or the movement of funds to other parties. Financial institutions should implement multifactor authentication, layered security…by end of 2006.
© Copyright Entrust, Inc. 200517 How Can Security Help People ProcessesTechnology Strong Authentication Encryption Content Control
© Copyright Entrust, Inc. 200518 Encryption Two-thirds of fresh and critical data is on employee laptops and desktops – not the servers. Gartner, April 2004 Two-thirds of fresh and critical data is on employee laptops and desktops – not the servers. Gartner, April 2004 Companies typically lose 5-8% of their laptops per year. The FBI estimates that 50% of network penetration is due to information derived from a stolen laptop. Meta, January 2005 Companies typically lose 5-8% of their laptops per year. The FBI estimates that 50% of network penetration is due to information derived from a stolen laptop. Meta, January 2005 By year-end 2007, 80% of Fortune 1000 enterprises will encrypt critical “data at rest” (0.8 probability) Gartner, April 2004 By year-end 2007, 80% of Fortune 1000 enterprises will encrypt critical “data at rest” (0.8 probability) Gartner, April 2004
© Copyright Entrust, Inc. 200519 Persistent Data Encryption
© Copyright Entrust, Inc. 200520 Benefits of Persistent Data Encryption Any person or business that conducts business in California…shall disclose any breach of the security of the system following discovery or notification of the breach in the security of the data to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person. California SB1386
© Copyright Entrust, Inc. 200521 Content Scanning Automated Policy Enforcement Detection and Blocking across broad set of outbound protocols Employees, Partners, Customers Employees http:// ftp:// IM
© Copyright Entrust, Inc. 200522 Stronger Mutual Authentication Understanding and Countering the Phishing Threat A Financial Services Industry Perspective Top 3 Recommendations: 1.Focus on Mutual Customer/Financial Institution Authentication 2.Improved Fraud Screening 3.Industry-wide Attack Method/Mitigation Information Sharing Report Defend Detect Prevent Solution Areas:
© Copyright Entrust, Inc. 200523 The Authentication Challenge Usability & Cost Security Minimize customer experience impact – Only impact user experience with stronger authentication when necessary – The right authentication for the right risk level – at the right time Fraud Risk
© Copyright Entrust, Inc. 200524 The Authentication Challenge – Risk-based Authentication Transaction Sequence Increasing Impact of Fraud Login Check Balance Register Bill Funds Transfer Risk based authentication requires a range of capabilities Increasing Authentication Strength
© Copyright Entrust, Inc. 200525 New Authentication Technologies Authentication Strength Purchase & Deployment Cost Passwords One-Time-Password Tokens Smartcards Traditional Biometrics $
© Copyright Entrust, Inc. 200526 Range of Risk-Based Strong Authentication Policy-based authentication allowing single authentication layer to meet multiple business requirements –Per transaction, per user, per application, per LOB… Machine Auth Authorized set of workstations Knowledge Auth Challenge / response questions Out-of-Band One-time-passcode to mobile device or phone Scratch Pad Auth One-time password list Grid Auth Grid location challenge and response Additional Technologies to Come
© Copyright Entrust, Inc. 200527 Unique authentication card issued to each user Random characters in grid with row/column headers Separate plastic card or on existing card Example – Grid Authentication Stand-Alone CardCard Add-On
© Copyright Entrust, Inc. 200528 Grid Authentication Process User enters ID & Password as is done today. Personal ID ********
© Copyright Entrust, Inc. 200529 Grid Authentication Process cont’d
© Copyright Entrust, Inc. 200530 Grid Authentication Process cont’d 1 2 3
© Copyright Entrust, Inc. 200531 Authentication Needs to be Mutual Easy to use mechanisms for customers to recognize they are on the right site. Message Replay Auth User entered message Serial Replay Auth Grid card serial number Image Replay Auth User selected image
© Copyright Entrust, Inc. 200532 Announced Wins in 2H05
© Copyright Entrust, Inc. 200533 Summary Identity Fraud will change the way organizations protect your sensitive information –May require legislation to drive real action Identity Fraud will change the way you interact with your financial institutions –Focus on addressing your confidence to drive continued internet adoption
Thank You email@example.com www.entrust.com 888-690-2424
1 Passwords are Dead! Entrust IdentityGuard™ Chris Voice VP Identity Management.
“Stronger” Web Authentication: A Security Review Cory Scott.
Large-Scale, Cost-Effective, Progressive Authentication and Identify Management Solutions Enabling Security, Efficiency and Collaboration through Technology.
Identity Assurance Emory University Security Conference March 26, 2008.
0 1 WHAT KEEPS USERS AWAY? 2 47% 46% 43% 39% 40% 50% 45% 34% 21% 15% 20% 19% 13% 26% 20% 12% I fear that my account information will be viewed by an unauthorized.
A l a d d I n. c o m Strong Authentication and Beyond Budai László, IT Biztonságtechnikai tanácsadó.
Online and Mobile Banking. Online banking Online Banking Online banking is a fairly established practice in our internet-saturated world. Many people.
INTRODUCTION Coined in 1996 by computer hackers. Hackers use to fish the internet hoping to hook users into supplying them the logins, passwords.
BUSINESS B1 Information Security. 2 Learning Outcomes Describe the relationship between information security policies and an information security plan.
IAPP CONFIDENTIAL Insider Leakage Threatens Privacy.
8.1 © 2007 by Prentice Hall 8 Chapter Securing Information Systems.
SPEKE S imple Password-authenticated Exponential Key Exchange Robert Mol Phoenix Technologies.
Online Banking Fraud Prevention Recommendations and Best Practices This document provides you with fraud prevention best practices that every employee.
9.4M online U.S. adults were victimized by identity theft in year ending April 2004 –Losses amounted to $11.7 billion Online theft is escalating The solution.
Cybercrime What is it, what does it cost, & how is it regulated?
1© Copyright 2012 EMC Corporation. All rights reserved. Next Generation Authentication Bring Your Own security impact Tim Dumas – Technology Consultant.
11%20(FFIEC%20Formated).pdf FFIEC Agency Supplement to Authentication in an Internet Banking Environment.
1 ZIXCORP The Criticality of Security Dena Bauckman Director Product Management April 2015.
Mobile Banking By: Chenyu Gong, Jalal Hafidi, Harika Malineni.
Computer Security Set of slides 8 Dr Alexei Vernitski.
Private, Secure, Guaranteed ACH Credits – The Next Generation of Online Payments Samantha Carrier, Director, eCommerce, NACHA.
Chapter © 2012 Pearson Education, Inc. Publishing as Prentice Hall.
Enterprise Computing Community June , 2010February 27, Information Security Industry View Linda Betz IBM Director IT Policy and Information.
CertAnon The feasibility of an anonymous WAN authentication service Red Group CS410 March 1, 2007.
Information Security Confidential Two-Factor Authentication Solution Overview Shawn Fulton January 15th, 2015.
IT Security Policy: Case Study March 2008 Copyright , All Rights Reserved.
African Banking Technology Conference 3 April 2008 Nairobi - Kenya Patrick Mburu Director, ATS - Africa.
Copyright 2006 IDC Reproduction is forbidden unless authorized. All rights reserved. Information Security Trends.
Insert Your Name Insert Your Title Insert Date Building a Fully Trusted Authentication Environment IBM-SafeNet Joint Solutions Strong Authentication for.
Why Comply with PCI Security Standards? Compliance with the PCI DSS means that your systems are secure, and customers can trust you with their sensitive.
Safe’n’Sec IT security solutions for enterprises of any size.
OCR GCSE ICT B063 (2016) ‘PROGRESS LEISURE’ © ZigZag Education 2015 Photocopiable/digital resources may only be copied by the purchasing institution on.
Identity Theft By: Chelsea Thompson. What is identity theft? The crime of obtaining the personal or financial information of another person for the purpose.
Information Security 2013 Roadshow. Roadshow Outline Why We Care About Information Security Safe Computing Recognize a Secure Web Site (HTTPS) How.
E-Commerce Security Issues. General E-Business Security Issues Any E-Business needs to be concerned about network security. The Internet is a “ public.
©2012 Check Point Software Technologies Ltd. | [Confidential] For Check Point users and approved third parties Building Your Security Strategy with 3D.
© 2014 wheresjenny.com Cyber crime CYBER CRIME. © 2014 wheresjenny.com Cyber crime Vocabulary Defacement : An attack on a website that changes the visual.
Yair Grindlinger, CEO and Co-Founder Do you know who your employees are sharing their credentials with? Do they?
Avoid data leakage, espionage, sabotage and other reputation and business risks without losing employee performance and mobility. Simplify authentication.
SemiCorp Inc. Presented by Danu Hunskunatai GGU ID #
Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.
Electronic Banking & Security Electronic Banking & Security.
Hosted by: June 23-26, 2003 New York City The Cost Justification for Choosing Biometrics Roy Lopez System Engineering Director.
Protecting Mainframe and Distributed Corporate Data from FTP Attacks: Introducing FTP/Security Suite Alessandro Braccia, DBA Sistemi.
© ITT Educational Services, Inc. All rights reserved. IS3230 Access Security Unit 7 Authentication Methods and Requirements.
First Community Bank Prevx Safe Online Rollout & Best Practice Presentation.
Avoid data leakage, espionage, sabotage and other reputation and business risks without losing employee performance and mobility.
© 2017 SlidePlayer.com Inc. All rights reserved.