Integrating Identity into Security Solutions
Session
Wednesday, December 04, 2024 12:15—13:15
Location: Sirius
Wednesday, December 04, 2024 12:15—13:15
Location: Sirius
With the arrival of the EU Digital Identity Wallet, the users will be able to store and manage a lot of information and many relationships. This is of course very convenient for the users, but will also make this an attractive target for criminals. In the Nordics, we are already seeing a lot of attacks on users, tricking them into using their BankID, where the criminals will be able to transfer money. With AI, the attacks will be more sophisticated, and the use of deep-fakes to steal large amounts of money has already happened.
The presentation will show the danger of the AI attacks used to hack people, and how the existing technical protections (such as MFA) will not prevent these, as it is the users themselves doing the transactions. In addition, it will look at how we are currently doing fraud prevention in the financial industry, and why these mechanisms may be challenging with the wallet, due to restrictions in the eIDAS2 regulation.
Explore revolutionary strategies in identity security. Learn how to outsmart emerging threats and fortify digital identities with cutting-edge solutions, ensuring unparalleled protection in the dynamic cyber world.
The increasing popularity of the term “Identity Security”, coupled with the explosive growth in the number of identity security vendors, bears testament to the fact that security starts and often ends with identity. But with so many tools, so many processes moving part making up the modern identity fabric, do you really know what is really happening behind the curtain and inside all that IAM infrastructure? Accounts are created, entitlements are assigned, users authenticate, access is authorized and data is accessed. This process not only happens for the standard users coming in through a nicely federated, passwordless authentication solution, but also for your admins, your agents and the service accounts they leverage. The very process of IAM is happening across all of your infrastructure, from legacy applications to cloud services and beyond into IaaS and the SaaS services you subscribe to. But when something changes in that flow, the configuration for an IdP or a relying system changes, or an update is made to profile configuration, orchestration flow or group assignment - will you identify the change, understand its meaning and forecast its overall risk to your identity security posture? Are you instrumented for the future state of IAM?
In his talk, KuppingerCole Fellow Analyst Darran Rolls, former CISO and CTO at SailPoint, will outline how Identity instrumentation and orchestration technology can help reverse-engineer the authentication and authorization flow of applications and provide key insights into configuration and usage. He will explain how the future state of IGA, ITDR, and overall Identity Security must deliver instrumentation to allow visibility, configuration and usage information for all applications and will highlight how emerging technologies can help fill this gap.
