Web Security with Auth0

Auth0 provides authentication and authorization as a service. We are here to give developers and companies the building blocks they need in order to secure their applications, without having to become security experts.

Reference: Md Shahbaz Alam

Transcript

1. Mehul Patel Web Security with Auth0
2. Mehul Patel Auth0 Ambassador, Auth0 Inc Twitter : @rowdymehul iamrowdymehul@gmail.com About Me
3. • Exposing Sensitive Data • Broken Authentication • Security Misconfiguration • Injection Vulnerability Common Web Security Vulnerabilities
4. The new way to solve Identity
5. What is Identity ?
6. What is Identity ? Authentication of an individual
7. What is Modern Identity ? • Authentication - The way you login • Authorization - Right access to Right People at Right Time • Security - Protecting data in motion and at rest • Personalization - Tailored user experience
8. Authentication ➔ Traditional Username and Password ➔ Social login via Facebook,Twitter, Google , etc. ➔ Enterprise Federation and Single Sign On ➔ Passwordless
9. Traditional Username and Password • Most Common • Easy to Implement • Least Secure
10. Social Login • Common • Medium Difficulty • More secure
11. Single Sign On • Most Common in Enterprise • Difficult to Implement • Solve Authorization use cases
12. Passwordless • Rare / Upcoming • Easy to Implement • Very secure
13. Authorization ➔ Ensure the user has the right access at the right time ➔ Grant, Change and Revoke access
14. Security Biggest concern for our valuable data
15. Password • Complexity • Storage • Security
16. Multi Factor Authentication • Something you know, Something you have , Something you are Brute Force Protection • Prevent repeated failed login attempts • Alert user and validate identity Anomaly Detection • Proactively protect users • Alert user of suspicious activity • Breached password detection
17. Personalization ➔ Give a personal touch to each user ➔ Make Data work for you ➔ Enhanced Analytics
18. Why Modern Identity ? 3 Big Reasons
19. 1. Higher Conversion Rates
20. 2. Better User Experience
21. 3. Increased Revenue
22. Auth0 Identity as a Service • Modern Identity in 10 minutes • Free Tier ( 7000 Monthly Active users ) • Team of Security Expert
23. Auth0 • We are not solely a security company • We are not only an authentication or authorization company • We are an Identity Company • What we want to do ? • We wanna make it easier for our customers to manage their users • By providing them with a modern platform which handles their authorization and authentication pieces • So they don’t have to worry about :-)
24. Visit auth0.com
30. Explore...
31. Questions ? Available on Telegram & Twitter : @rowdymehul