The End of User Authentication & the Coming Auto Authentication by the Server
summary
Claim: user-driven passwords and fragmented biometrics give way to auto authentication by the server and a self-sovereign authentication model where the server and device mutually authenticate and the user’s device issues short-lived codes. Cites IoT scale (4 billion people, 25 billion devices), market growth (about $12.5B to $36.5B in five years), seven-stage Cyber Kill Chain, phishing and ransomware as top vectors (ransomware every ~14 seconds), demos of phone-app code + biometric flows for Windows, Linux, banking and door access, and an OATH-launched service slated next year.
AI-written summary · about
chapters (18)
- 0:00Introduction to talk
- 0:23Outline and key takeaways
- 1:04IoT vulnerabilities and attack types
- 3:10Breaches and cybersecurity challenges
- 4:37NIST cybersecurity framework
- 5:41Top five attack factors
- 6:45Cyber kill chain explained
- 8:33Common vulnerabilities in systems
- 8:55User authentication challenges
- 11:46Self-sovereign authentication concept
- 12:27Password-based authentication demo
- 13:07Passwordless authentication demo
- 13:57Multi-factor authentication examples
- 15:22Benefits of self-sovereign auth
- 16:45Trends in authentication tech
- 17:49Decentralized authentication future
- 18:52IoT security recommendations
- 19:53Summary of threats and solutions
related talks
27mSecure Authentication without the Need for Passwords
19mAdvanced Authentication Framework
42mChallenges in User Authentication: Balancing Security & User Experience
30mGoing Beyond Passwords: The Future of User Authentication
44m(in)Security is eating the world
21mProliferation of Authentication Methods
31mWeb Authentication - Imagine a World Without Passwords
16mInnovation in Authentication and More