Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Multi-factor Authentication

Avatar for brainsik brainsik
July 29, 2016
Technology
43
0

Multi-factor Authentication

Avatar for brainsik

brainsik

July 29, 2016

Other Decks in Technology

See All in Technology
遠藤な_めぐろLT #38 「社内のAI活用推進」@麻布台_20261009
Avatar for Naoya Endo endonanana
0
130
ブラウザとサーバーから考えるAI時代のフロントエンド監視
Avatar for Shogo Fukami shogo4131
3
950
Refining Active Record
Avatar for Shugo Maeda shugo
0
160
AIカンパニーへの転換を支えた、エンジニアの仕事の再定義
Avatar for KNOWLEDGE WORK / 株式会社ナレッジワーク kworkdev
PRO
2
1.3k
LambdaWebFunctionsを試してみた / exploring-lambda-web-functions
Avatar for koukihosaka koukihosaka
1
350
Rustuna: Rustによる高速なOptuna実装
Avatar for Preferred Networks pfn
PRO
0
190
TinyGoでオブザーバビリティ？OpenTelemetryはTinyGoで使えるのか / Is OpenTelemetry available in TinyGo environment?
Avatar for ymotongpoo ymotongpoo
2
140
パッチ更新でterraform initが落ちた日
Avatar for gr1m0h grimoh
1
140
Metadata - Section 1: HTML Basics
Avatar for mohab soliman mohab1
0
120
アウトプット初心者、半年間のふりかえり
Avatar for aoi 4o1sobblue
0
440
DWH の限界突破！ AI エージェント向け爆速リアルタイムデータ基盤 ClickHouse
Avatar for jozono jozono
1
480
Persisting Massive Data with Rails ~Designing for 60 billion rows, and fighting the bottlenecks~ Railsで挑む大量データ永続化 〜600億件を永続化するための設計とボトルネックとの戦い〜
Avatar for Shoichi Ochi occhi
0
730

Featured

See All Featured
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
Avatar for AKADEMIYA2063 akademiya2063
PRO
1
410
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
37
7.5k
Accessibility Awareness
Avatar for Sarah Abderemane sabderemane
1
250
Mind Mapping
Avatar for Hélio Medeiros helmedeiros
1
400
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
7k
Docker and Python
Avatar for Tania Allard trallard
47
4.2k
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
96
6.9k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
47
8.4k
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
370
Google's AI Overviews - The New Search
Avatar for Barry Adams badams
0
1.6k
SEO for Brand Visibility & Recognition
Avatar for Aleyda Solis aleyda
0
4.8k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
33
5.2k

Transcript

  1. Multi-factor Authentication 29th July 2016

  2. ˙© truss 2015 proprietary and confidential Authentication Proving authority •

    Password • Lots of things …

  3. ˙© truss 2015 proprietary and confidential Authentication

  4. ˙© truss 2015 proprietary and confidential Authentication

  5. ˙© truss 2015 proprietary and confidential Authentication

  6. ˙© truss 2015 proprietary and confidential Authentication Factors • Knowledge

    • Possession • Inherence

  7. ˙© truss 2015 proprietary and confidential Authentication

  8. ˙© truss 2015 proprietary and confidential Authentication

  9. ˙© truss 2015 proprietary and confidential Authentication

  10. ˙© truss 2015 proprietary and confidential Authentication

  11. ˙© truss 2015 proprietary and confidential MFA Multi-factor Authentication (MFA)

    • More is more • ATM uses two-factor authentication

  12. ˙© truss 2015 proprietary and confidential The 2FA Fallacy On

    the web • "2FA" means password + expiring token • SMS token • TOTP token (Hash(Secret + Time)) • Very weak possession factor

  13. ˙© truss 2015 proprietary and confidential Better

  14. ˙© truss 2015 proprietary and confidential Factors Mutable factors •

    Printing fingerprints • Unmemorable passwords

  15. ˙© truss 2015 proprietary and confidential Sadness (In)Security Questions •

    ZFA (Zero Factor Auth) • Make lemonade

  16. ˙© truss 2015 proprietary and confidential Sadness Public email addresses

    • Lemonade: make it a strong knowledge factor $ bin/mxhash.sh truss.works [email protected]