Florence Blanc-Renaud Senior Software Engineer - Identity Management - Red Hat
|
|
|
- Rosa Fleming
- 5 years ago
- Views:
Transcription
1 TOO BAD... YOUR PASSWORD HAS JUST BEEN STOLEN! DID YOU CONSIDER USING 2FA? Florence Blanc-Renaud Senior Software Engineer - Identity Management - Red Hat
2 A GOOD PASSWORD: SECURITY THROUGH AUTHENTICATION must be easy to remember but not a dictionary word must contain different classes of characters must be long enough to prevent brute-force attacks must not be reused everywhere but not easy to guess but not written on a sticky note but I have tens of passwords to remember! must be changed regularly but is never safe against phishing traps... MANY CONSTRAINTS BUT NO GUARANTEE THAT ONLY BOB KNOWS BOB'S PWD
3 PASSWORDS ARE NOT SECURE. WHAT SHOULD I DO, THEN?
4 PASSWORDS ARE NOT SECURE. WHAT SHOULD I DO, THEN? TWO FACTOR AUTHENTICATION ONE-TIME PASSWORDS (OTP): Usual password Code retrieved from an external device (smartphone, hardware token) SMART CARDS: PIN Smart Card (credit-card format + reader or USB token)
5 IDENTITY MANAGEMENT MAIN FEATURES CENTRALIZED AUTHENTICATION Source: IDM or Active Directory Credentials: passwords, certificates, Smart Cards, OTP tokens Single Sign-On: Kerberos, SAML, OpenID CENTRALIZED AUTHORIZATION Resources: systems, services, applications HBAC, sudo rules, privileges CENTRALIZED MANAGEMENT DNS Policy Certificates and Keys BASED ON A COLLECTION OF OPEN SOURCE COMPONENTS: KDC, LDAP, PKI, DNS, FREEIPA
6 OTP AUTHENTICATION PHASE 1: SHARING A SECRET Soft token (freeotp) Secret user 1 Secret / SR Serial number XXX user 2 XXX Hardware token (gemalto) user 3 Write secret Programmable Hardware token (yubikey)
7 OTP AUTHENTICATION PHASE 2: SYNCHRONIZE COUNTER user 1 code(counter_n) code(counter_n+1) Soft token (freeotp) code(counter) =f(, counter) PHASE 3: LOGIN First factor password user 1-2FA Second factor: code Soft token (freeotp)
8 SMART CARD AUTHENTICATION FREEIPA CLIENT Username: PIN: 1 Smart card inserted: local checks (PIN, certificate valid and trusted, OCSP checks) 1 2 client provides the cert inside the authentication request 3 server looks for a corresponding user entry 4 user found: user is authenticated and gets a TGT
9 WITH FULL CERTIFICATE BLOB (RHEL < 7.4 / FREEIPA < 4.5)
10 WITH FULL CERTIFICATE BLOB (RHEL < 7.4 / FREEIPA < 4.5) BEGIN CERTIFICATE MIIC3jCCAcagAwIBAgICfhUw [...] RTuD/xbee2FwuOpTLsfUo0ef END CERTIFICATE
11 WITH FULL CERTIFICATE BLOB (RHEL < 7.4 / FREEIPA < 4.5) BEGIN CERTIFICATE MIIC3jCCAcagAwIBAgICfhUw [...] RTuD/xbee2FwuOpTLsfUo0ef END CERTIFICATE
12 WITH FULL CERTIFICATE BLOB (RHEL < 7.4 / FREEIPA < 4.5) dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo usercertificate:: MIIC3...0ef BEGIN CERTIFICATE MIIC3jCCAcagAwIBAgICfhUw [...] RTuD/xbee2FwuOpTLsfUo0ef END CERTIFICATE
13 WITH FULL CERTIFICATE BLOB (RHEL < 7.4 / FREEIPA < 4.5) Admin has to extract the certificate from the Smart Card in order to provision the user entry dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo usercertificate:: MIIC3...0ef BEGIN CERTIFICATE MIIC3jCCAcagAwIBAgICfhUw [...] RTuD/xbee2FwuOpTLsfUo0ef END CERTIFICATE
14 WITH FULL CERTIFICATE BLOB (RHEL < 7.4 / FREEIPA < 4.5) Admin has to extract the certificate from the Smart Card in order to provision the user entry Painful process when smart card is lost: issue new certificate, update LDAP entry dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo usercertificate:: MIIC3...0ef BEGIN CERTIFICATE MIIC3jCCAcagAwIBAgICfhUw [...] RTuD/xbee2FwuOpTLsfUo0ef END CERTIFICATE
15 WITH FULL CERTIFICATE BLOB (RHEL < 7.4 / FREEIPA < 4.5) Admin has to extract the certificate from the Smart Card in order to provision the user entry Painful process when smart card is lost: issue new certificate, update LDAP entry A certificate can be mapped to only one user entry dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo usercertificate:: MIIC3...0ef BEGIN CERTIFICATE MIIC3jCCAcagAwIBAgICfhUw [...] RTuD/xbee2FwuOpTLsfUo0ef END CERTIFICATE
16 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5)
17 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5) Issuer: O=EXAMPLE.COM, CN=Certificate Authority Subject: O=EXAMPLE.COM,CN=frenaud...
18 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5) Issuer: O=EXAMPLE.COM, CN=Certificate Authority Subject: O=EXAMPLE.COM,CN=frenaud...
19 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5) dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo ipacertmapdata: X509:<I>O=EXAMPLE.COM,CN=Certificate Authority<S>O=EXAMPLE.COM,CN=frenaud Issuer: O=EXAMPLE.COM, CN=Certificate Authority Subject: O=EXAMPLE.COM,CN=frenaud...
20 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5) Admin can provision the user *before* the certificate is created dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo ipacertmapdata: X509:<I>O=EXAMPLE.COM,CN=Certificate Authority<S>O=EXAMPLE.COM,CN=frenaud Issuer: O=EXAMPLE.COM, CN=Certificate Authority Subject: O=EXAMPLE.COM,CN=frenaud...
21 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5) Admin can provision the user *before* the certificate is created No need to publish the certificate in the user entry dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo ipacertmapdata: X509:<I>O=EXAMPLE.COM,CN=Certificate Authority<S>O=EXAMPLE.COM,CN=frenaud Issuer: O=EXAMPLE.COM, CN=Certificate Authority Subject: O=EXAMPLE.COM,CN=frenaud...
22 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5) Admin can provision the user *before* the certificate is created No need to publish the certificate in the user entry Possible to map multiple users with a single certificate (user roles) dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo ipacertmapdata: X509:<I>O=EXAMPLE.COM,CN=Certificate Authority<S>O=EXAMPLE.COM,CN=frenaud Issuer: O=EXAMPLE.COM, CN=Certificate Authority Subject: O=EXAMPLE.COM,CN=frenaud...
23 WITH FLEXIBLE MAPPING (RHEL 7.4 / FREEIPA 4.5) Admin can provision the user *before* the certificate is created No need to publish the certificate in the user entry Possible to map multiple users with a single certificate (user roles) Pkinit support: Kerberos certificate-based authentication dn: uid=flo,cn=users,cn=accounts,$basedn uid: flo ipacertmapdata: X509:<I>O=EXAMPLE.COM,CN=Certificate Authority<S>O=EXAMPLE.COM,CN=frenaud Issuer: O=EXAMPLE.COM, CN=Certificate Authority Subject: O=EXAMPLE.COM,CN=frenaud...
24 QUESTIONS?
25 RESOURCES FREEIPA Project wiki: Project repo and issues: Blog aggregation: FreeIPA demo instance in the cloud: Mailing lists:
26 THANK YOU!
Identity Management In Red Hat Enterprise Linux. Dave Sirrine Solutions Architect
Identity Management In Red Hat Enterprise Linux Dave Sirrine Solutions Architect Agenda Goals of the Presentation 2 Identity Management problem space What Red Hat Identity Management solution is about?
Practical Steps Implementing Red Hat Identity Management Solution David Sirrine Senior Technical Account Manager, Red Hat Jerel Gilmer SEC June 29,
Practical Steps Implementing Red Hat Identity Management Solution David Sirrine Senior Technical Account Manager, Red Hat Jerel Gilmer SEC June 29, 2016 Agenda Brief introduction to the Red Hat Identity
Escape from the Identity crisis with FreeIPA
Escape from the Identity crisis with FreeIPA Identity Management What is Identity Management? Identity management (IdM) describes the management of individual principals, their authentication, authorization,
Integrating the RHCI Suite with IdM
Integrating the RHCI Suite with IdM INTRODUCTION Who are we? Chris Keller Solutions Architect Red Hat, Inc. Nathan Kinder Engineering Manager Red Hat, Inc. What is IdM? IdM Features Numerous Capabilities
Identity Management: Unicorn or Gorgon?
Identity Management: Unicorn or Gorgon? LOPSA Columbus Josh Preston Solutions Architect, Red Hat, Inc. 10-27-2016 Josh Preston mrjoshuap@redhat.com Twitter @MrJoshuaP XBox Live MrJoshuaP https://people.redhat.com/jpreston
MIT Kerberos & Red Hat
MIT Kerberos & Red Hat Past, Present and Future Dmitri Pal Sr. Engineering Manager, Red Hat Inc. October 2012 Agenda MIT Kerberos and Red Hat involvement Project details Future plans Context Red Hat has
Deprecating the Password: A Progress Report. Dr. Michael B. Jones Identity Standards Architect, Microsoft May 17, 2018
Deprecating the Password: A Progress Report Dr. Michael B. Jones Identity Standards Architect, Microsoft May 17, 2018 The password problem Alpha-numeric passwords are hard for humans to remember and easy
FreeIPA. Directory and authentication services the easy way. Christian Stankowic. Free and Open Source software Conference
FreeIPA Directory and authentication services the easy way Christian Stankowic www.stankowic-development.net Free and Open Source software Conference 21.08.2016 whoami Christian Stankowic Messer Information
Using Two-Factor Authentication to Connect to a Kerberos-enabled Informatica Domain
Using Two-Factor Authentication to Connect to a Kerberos-enabled Informatica Domain Copyright Informatica LLC 2016, 2018. Informatica LLC. No part of this document may be reproduced or transmitted in any
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: CARLETON UNIVERSITY Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
FreeIPA - Control your identity
FreeIPA - Control your identity LinuxAlt 2012 Martin Košek, Sr. Software Engineer, Red Hat Nov 3 rd, 2012 This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike
Authentication. Overview of Authentication systems. IT352 Network Security Najwa AlGhamdi
Authentication Overview of Authentication systems 1 Approaches for Message Authentication Authentication is process of reliably verifying the identity of someone. Authentication Schemes 1. Password-based
VMware Workspace ONE Quick Configuration Guide. VMware AirWatch 9.1
VMware Workspace ONE Quick Configuration Guide VMware AirWatch 9.1 A P R I L 2 0 1 7 V 2 Revision Table The following table lists revisions to this guide since the April 2017 release Date April 2017 June
What is Authentication? All requests for resources have to be monitored. Every request must be authenticated and authorized to use the resource.
P1L4 Authentication What is Authentication? All requests for resources have to be monitored. Every request must be authenticated and authorized to use the resource. Authentication: Who are you? Prove it.
Pattern Recognition and Applications Lab AUTHENTICATION. Giorgio Giacinto.
Pattern ecognition and Applications Lab AUTHENTICATION Giorgio Giacinto giacinto@diee.unica.it Computer Security 2018 Department of Electrical and Electronic Engineering University of Cagliari, Italy Authentication
Stop sweating the password and learn to love public key cryptography. Chris Streeks Solutions Engineer, Yubico
1 Stop sweating the password and learn to love public key cryptography Chris Streeks Solutions Engineer, Yubico Stop Sweating the Password! 2 Agenda Introduction The modern state of Phishing How to become
How to Secure SSH with Google Two-Factor Authentication
How to Secure SSH with Google Two-Factor Authentication WELL, SINCE IT IS QUITE COMPLEX TO SET UP, WE VE DECIDED TO DEDICATE A WHOLE BLOG TO THAT PARTICULAR STEP! A few weeks ago we took a look at how
Yubico with Centrify for Mac - Deployment Guide
CENTRIFY DEPLOYMENT GUIDE Yubico with Centrify for Mac - Deployment Guide Abstract Centrify provides mobile device management and single sign-on services that you can trust and count on as a critical component
Breaking FIDO Yubico. Are Exploits in There?
Breaking FIDO Are Exploits in There? FIDO U2F (Universal 2nd Factor) Analyzing FIDO U2F Attack and Countermeasures Implementation Considerations Resources 2 User Experience 1. Enter username/pwd 2. Insert
CS530 Authentication
CS530 Authentication Bill Cheng http://merlot.usc.edu/cs530-s10 1 Identification vs. Authentication Identification associating an identity (or a claimed identity) with an individual, process, or request
VIEVU Solution AD Sync and ADFS Guide
VIEVU Solution AD Sync and ADFS Guide Introduction This guide describes how to operate the VIEVU Solution AD Sync utility and configure Active Directory Federation Services (ADFS). Additional support material
User Authentication. Modified By: Dr. Ramzi Saifan
User Authentication Modified By: Dr. Ramzi Saifan Authentication Verifying the identity of another entity Computer authenticating to another computer Person authenticating to a local/remote computer Important
Publishing Enterprise Web Applications to BYOD using a Granular. Trust Model. Shachaf Levi IT Client Security & Connectivity May 2013.
Publishing Enterprise Web Applications to BYOD using a Granular Trust Model Shachaf Levi IT Client Security & Connectivity May 2013 Public Legal Notices This presentation is for informational purposes
Integrating AirWatch and VMware Identity Manager
Integrating AirWatch and VMware Identity Manager VMware AirWatch 9.1.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a
BIDMC Multi-Factor Authentication Enrollment Guide Table of Contents
BIDMC Multi-Factor Authentication Enrollment Guide Table of Contents Definitions... 2 Summary... 2 BIDMC Multi-Factor Authentication Enrollment... 3 Common Multi-Factor Authentication Enrollment Issues...
<Partner Name> <Partner Product> RSA SECURID ACCESS Authenticator Implementation Guide. Check Point SmartEndpoint Security
RSA SECURID ACCESS Authenticator Implementation Guide Check Point SmartEndpoint Security Daniel R. Pintal, RSA Partner Engineering Last Modified: January 27, 2017 Solution
NetMotion Integration with GreenRADIUS - Quick Start Guide
NetMotion Integration with GreenRADIUS - Quick Start Guide March 15, 2016 2016 GreenRADIUS. All rights reserved. Page 1 of 16 2016 GreenRADIUS. All rights reserved. Page 2 of 16 Contents 1 GreenRADIUS
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: Lynda.com Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative
External Authentication with Citrix GoToMyPc Corporate Edition Authenticating Users Using SecurAccess Server by SecurEnvoy
External Authentication with Citrix GoToMyPc Corporate Edition Authenticating Users Using SecurAccess Server by SecurEnvoy Contact information SecurEnvoy www.securenvoy.com 0845 2600010 1210 Parkview Arlington
Simon Josefsson
Simon Josefsson simon@yubico.com http://www.yubico.com/ Copyright 2007 Simon Josefsson Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided
ASC Chairman. Best Practice In Data Security In The Cloud. Speaker Name Dr. Eng. Bahaa Hasan
Regional Forum on Cybersecurity in the Era of Emerging Technologies & the Second Meeting of the Successful Administrative Practices -2017 Cairo, Egypt 28-29 November 2017 Best Practice In Data Security
penelope case management software AUTHENTICATION GUIDE v4.4 and higher
penelope case management software AUTHENTICATION GUIDE v4.4 and higher Last modified: August 9, 2016 TABLE OF CONTENTS Authentication: The basics... 4 About authentication... 4 SSO authentication... 4
ADmitMac PKI Executive Summary. 2010, Thursby Software Systems, Inc.
ADmitMac PKI Executive Summary Thursby Software Systems, Inc. November 15,2010 Why ADmitMac PKI? Leverage your existing Active Directory and PKI infrastructure when adding Macintosh computers. Helps meet
Identity Management and Compliance in OpenShift
Identity Management and Compliance in OpenShift Or Use DevOps to Make Your Auditors and Suits Happy Marc Boorshtein CTO, Tremolo Security Ellen Newlands Senior Security Product Manager, Cloud Business
Centrify Infrastructure Services
Centrify Infrastructure Services Smart Card Configuration Guide August 2018 (release 18.8) Centrify Corporation Legal Notice This document and the software described in this document are furnished under
ISA 2006 and OWA 2003 Implementation Guide
ISA 2006 and OWA 2003 Implementation Guide Copyright Copyright 2006, CRYPTOCard Corp. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval
Smart Card Authentication Guide
Smart Card Authentication Guide January 29, 2018 - Version 9.2 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Getting Started with Duo Security Two-Factor Authentication (2FA)
Getting Started with Duo Security Two-Factor Authentication (2FA) Table of Contents What is Two-Factor Authentication (2FA)?... 1 Why 2FA at Bates College?... 2 2FA Technologies... 3 Duo Protected Resources
CNT4406/5412 Network Security
CNT4406/5412 Network Security Authentication Zhi Wang Florida State University Fall 2014 Zhi Wang (FSU) CNT4406/5412 Network Security Fall 2014 1 / 43 Introduction Introduction Authentication is the process
Next Generation Physical Access Control Systems A Smart Card Alliance Educational Institute Workshop
Next Generation Physical Access Control Systems A Smart Card Alliance Educational Institute Workshop PACS Integration into the Identity Infrastructure Salvatore D Agostino CEO, IDmachines LLC 8 th Annual
SAML-Based SSO Solution
About SAML SSO Solution, page 1 Single Sign on Single Service Provider Agreement, page 2 SAML-Based SSO Features, page 2 Basic Elements of a SAML SSO Solution, page 3 Cisco Unified Communications Applications
Radius, LDAP, Radius used in Authenticating Users
CSCD 303 Lecture 5 Fall 2017 Kerberos Radius, LDAP, Radius used in Authenticating Users Introduction to Centralized Authentication Kerberos is for authentication only and provides Single Sign-on (SSO)
1. Federation Participant Information DRAFT
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES [NOTE: This document should be considered a as MIT is still in the process of spinning up its participation in InCommon.] Participation in InCommon
Canadian Access Federation: Trust Assertion Document (TAD)
1. Canadian Access Federation Participant Information 1.1.1. Organization name: DOUGLAS COLLEGE 1.1.2. Information below is accurate as of this date: November 16, 2017 1.2 Identity Management and/or Privacy
How to Integrate an External Authentication Server
How to Integrate an External Authentication Server Required Product Model and Version This article applies to the Barracuda Load Balancer ADC 540 and above, version 5.1 and above, and to all Barracuda
ArcGIS Enterprise Security: An Introduction. Gregory Ponto & Jeff Smith
ArcGIS Enterprise Security: An Introduction Gregory Ponto & Jeff Smith Agenda ArcGIS Enterprise Security Model Portal for ArcGIS Authentication Authorization Building the Enterprise Encryption Collaboration
Identity Management Scaling Out and Up
Identity Management Scaling Out and Up Jan Pazdziora Principal Software Engineer Identity Management Engineering, Red Hat jpazdziora@redhat.com 15 th October 2014 Identity Users; user groups. Hosts; host
Sumy State University Department of Computer Science
Sumy State University Department of Computer Science Lecture 1 (part 2). Access control. What is access control? A cornerstone in the foundation of information security is controlling how resources are
External Authentication with Checkpoint R77.20 Authenticating Users Using SecurAccess Server by SecurEnvoy
External Authentication with Checkpoint R77.20 Authenticating Users Using SecurAccess Server by SecurEnvoy Contact information SecurEnvoy www.securenvoy.com 0845 2600010 Merlin House Brunel Road Theale
Webthority can provide single sign-on to web applications using one of the following authentication methods:
Webthority HOW TO Configure Web Single Sign-On Webthority can provide single sign-on to web applications using one of the following authentication methods: HTTP authentication (for example Kerberos, NTLM,
Canadian Access Federation: Trust Assertion Document (TAD)
Submit Form Participant Name: Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: McMaster University Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
User Authentication. Modified By: Dr. Ramzi Saifan
User Authentication Modified By: Dr. Ramzi Saifan Authentication Verifying the identity of another entity Computer authenticating to another computer Person authenticating to a local/remote computer Important
SSSD: FROM AN LDAP CLIENT TO SYSTEM SECURITY SERVICES DEAMON
SSSD: FROM AN LDAP CLIENT TO SYSTEM SECURITY SERVICES DEAMON ABOUT ME AND THE TALK I'm a developer working for Red Hat, mostly on SSSD Twitter: @JakubHrozek Github: https://github.com/jhrozek/fosdem2018
EXPERIENCE SIMPLER, STRONGER AUTHENTICATION
1 EXPERIENCE SIMPLER, STRONGER AUTHENTICATION 2 Data Breaches are out of control 3 IN 2014... 708 data breaches 82 million personal records stolen $3.5 million average cost per breach 4 We have a PASSWORD
Goal. TeraGrid. Challenges. Federated Login to TeraGrid
Goal Federated Login to Jim Basney Terry Fleury Von Welch Enable researchers to use the authentication method of their home organization for access to Researchers don t need to use -specific credentials
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name:_Unversity of Regina Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
QUESTION: 1 An RSA SecurID tokencode is unique for each successful authentication because
1 RSA - 050-v71-CASECURID02 RSA SecurID Certified Administrator 7.1 Exam QUESTION: 1 An RSA SecurID tokencode is unique for each successful authentication because A. a token periodically calculates a new
Canadian Access Federation: Trust Assertion Document (TAD)
Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative and accurate identity attributes to resources being accessed, and that Participants
Lotus Domino Security NSL, Web SSO, Notes ID vault. Collin Murray Program Director, Lotus Domino Product Management
Lotus Domino Security NSL, Web SSO, Notes ID vault Collin Murray Program Director, Lotus Domino Product Management Challenge: Reduce Cost of Ownership IBM Lotus Notes and Domino have been providing a secure
Smart Card Authentication Guide
Smart Card Authentication Guide May 2, 2014 - Version 9.3 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Inside Symantec O 3. Sergi Isasi. Senior Manager, Product Management. SR B30 - Inside Symantec O3 1
Inside Symantec O 3 Sergi Isasi Senior Manager, Product Management SR B30 - Inside Symantec O3 1 Agenda 2 Cloud: Opportunity And Challenge Cloud Private Cloud We should embrace the Cloud to respond to
Trusted identities for the cloud using open source technologies where Open ecard App meets SkIDentity
Trusted identities for the cloud using open source technologies where Open ecard App meets SkIDentity Tobias Wich Dr. Detlef Hühnlein Moritz Horsch Johannes Schmölz} Berlin, 23.5.2012 Agenda Introduction
RED HAT ENTERPRISE LINUX: ACTIVE DIRECTORY - CLIENT INTEGRATION OPTIONS
RED HAT ENTERPRISE LINUX: ACTIVE DIRECTORY - CLIENT INTEGRATION OPTIONS TECHNOLOGY BRIEF INTRODUCTION For many organizations, Microsoft Active Directory is the hub for user identity management. Typically,
SurePassID ServicePass User Guide. SurePassID Authentication Server 2017
SurePassID ServicePass User Guide SurePassID Authentication Server 2017 Introduction This technical guide shows how users can manage their SurePassID security tokens that are compatible with SurePassID
AS emas emudhra Authentication Solution
AS emas emudhra Authentication Solution Create your own trusted enterprise network of users, devices, applications! With malware, ransomware and other cyber threats constantly thrown at Enterprises, a
Kerberos and Public-Key Infrastructure. Key Points. Trust model. Goal of Kerberos
Kerberos and Public-Key Infrastructure Key Points Kerberos is an authentication service designed for use in a distributed environment. Kerberos makes use of a thrusted third-part authentication service
Identity-Powered Security
Identity-Powered Security Innovation created a very complex environment. z / OS PL / I Public Cloud Private Cloud Internet of Things (IoT) COBOL CICS IMS Cloud How is leveraging cloud impacting risk and
Digital Identity Trends in Banking
i-sprint Innovations Identity and Security Management Solution Provider Digital Identity Trends in Banking Banking Vietnam 2017 Proven Bank Grade Identity and Security Management Solution Designed, Architected
Hardware Tokens in META Centre
MWSG meeting, CERN, September 15, 2005 Hardware Tokens in META Centre Daniel Kouřil kouril@ics.muni.cz CESNET Project META Centre One of the basic activities of CESNET (Czech NREN operator); started in
Self-Service Password Maintenance
Change Password & Forgot Password Portals University Hospitals employees may use self-service password portals to change their current UH network password or reset a forgotten UH network password, without
Check Point GO R75. User Guide. 14 November Classification: [Public]
![Check Point GO R75. User Guide. 14 November Classification: [Public]](/thumbs/74/70104753.jpg "Check Point GO R75. User Guide. 14 November Classification: [Public]")
Check Point GO R75 User Guide 14 November 2011 Classification: [Public] 2011 Check Point Software Technologies Ltd. All rights reserved. This product and related documentation are protected by copyright
Single Sign on. Dr. Suchitra Suriya, H.O.D, MSc. (I.T) Department, Jain University, Bangalore-69, India.
Single Sign on Anurag Dey, MSc. (I.T) Final Year Student, Jain University, Bangalore- 100, India Dr. Suchitra Suriya, H.O.D, MSc. (I.T) Department, Jain University, Bangalore-69, India. Abstract Today
Smart Grid Security. Selected Principles and Components. Tony Metke Distinguished Member of the Technical Staff
Smart Grid Security Selected Principles and Components Tony Metke Distinguished Member of the Technical Staff IEEE PES Conference on Innovative Smart Grid Technologies Jan 2010 Based on a paper by: Anthony
MANAGING LOCAL AUTHENTICATION IN WINDOWS
MANAGING LOCAL AUTHENTICATION IN WINDOWS Credentials Manager Windows OS has a set of tools that help remedy some of the authentication challenges. For example, the Credential Manager in Windows 7 and newer
ArcGIS Enterprise Security: An Introduction. Randall Williams Esri PSIRT
ArcGIS Enterprise Security: An Introduction Randall Williams Esri PSIRT Agenda ArcGIS Enterprise Security for *BEGINNING to INTERMIDIATE* users ArcGIS Enterprise Security Model Portal for ArcGIS Authentication
DIGIPASS Authentication for NETASQ
DIGIPASS Authentication for NETASQ With IDENTIKEY Server 2010 Integration VASCO Data Security. Guideline All rights reserved. Page 1 of 19 Disclaimer Disclaimer of Warranties and Limitations of Liabilities
TLS Client Certificate and Smart Card Logon
TLS and Smart Card Logon Ing. Ondřej Ševeček GOPAS a.s. MCSM:Directory2012 MCM:Directory2008 MVP:Enterprise Security CEH: Certified Ethical Hacker CHFI: Computer Hacking Forensic Investigator CISA ondrej@sevecek.com
Canadian Access Federation: Trust Assertion Document (TAD)
Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative and accurate identity attributes to resources being accessed, and that Participants
Berner Fachhochschule Haute cole spcialise bernoise Berne University of Applied Sciences 2
Table of Contents Hacking Web Sites Broken Authentication Emmanuel Benoist Spring Term 2018 Introduction Examples of Attacks Brute Force Session Spotting Replay Attack Session Fixation Attack Session Hijacking
Attacking Your Two-Factor Authentication (PS: Use Two-Factor Authentication)
Attacking Your Two-Factor Authentication (PS: Use Two-Factor Authentication) 08 Jun 2017 K-LUG Technical Meeting Rochester, MN Presented by: Vi Grey Independent Security Researcher https://vigrey.com Who
END OF SALE ANNOUNCEMENT
SafeNet Authentication Manager OTP Authentication END OF SALE ANNOUNCEMENT The purpose of this bulletin is to announce End-of-Sale (EOS) and Last-Time-Buy (LTB) plans for the following products: SafeNet
10 Active Directory Misconfigurations That Lead to Total Compromise Austin, TX 201 W 5th St.
10 Active Directory Misconfigurations That Lead to Total Compromise hello@javelin-networks.com +1-888-867-5179 Austin, TX 201 W 5th St. 1. Group Policy Preferences Visible Passwords Group Policy Preferences
<Partner Name> <Partner Product> RSA SECURID ACCESS. VMware Horizon View 7.2 Clients. Standard Agent Client Implementation Guide
RSA SECURID ACCESS Standard Agent Client Implementation Guide VMware Horizon View 7.2 Clients Daniel R. Pintal, RSA Partner Engineering Last Modified: September 14, 2017
Installing and Configuring VMware Identity Manager Connector (Windows) OCT 2018 VMware Identity Manager VMware Identity Manager 3.
Installing and Configuring VMware Identity Manager Connector 2018.8.1.0 (Windows) OCT 2018 VMware Identity Manager VMware Identity Manager 3.3 You can find the most up-to-date technical documentation on
IBM Education Assistance for z/os V2R2
IBM Education Assistance for z/os V2R2 Item: NAS PKINIT Element/Component: NAS (Kerberos) Material current as of May 2015 Agenda Trademarks Presentation Objectives Overview Usage & Invocation Interactions
Guide to Deploying VMware Workspace ONE. VMware Identity Manager VMware AirWatch 9.1
Guide to Deploying VMware Workspace ONE VMware Identity Manager 2.9.1 VMware AirWatch 9.1 Guide to Deploying VMware Workspace ONE You can find the most up-to-date technical documentation on the VMware
Unlocking Office 365 without a password. How to Secure Access to Your Business Information in the Cloud without needing to remember another password.
Unlocking Office 365 without a password How to Secure Access to Your Business Information in the Cloud without needing to remember another password. Introduction It is highly likely that if you have downloaded
A Modified Approach for Kerberos Authentication Protocol with Secret Image by using Visual Cryptography
A Modified Approach for Kerberos Authentication Protocol with Secret Image by using Visual Cryptography Ashok Kumar J 1, and Gopinath Ganapathy 2 1,2 School of Computer Science, Engineering and Applications
Canadian Access Federation: Trust Assertion Document (TAD)
Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative and accurate identity attributes to resources being accessed, and that Participants
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: British Columbia Institute of Technology Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation
Whitepaper on AuthShield Two Factor Authentication with SAP
Whitepaper on AuthShield Two Factor Authentication with SAP By AuthShield Labs Pvt. Ltd Table of Contents Table of Contents...2 1.Overview...4 2. Threats to account passwords...5 2.1 Social Engineering
CNIT 125: Information Security Professional (CISSP Preparation) Ch 6. Identity and Access Management
CNIT 125: Information Security Professional (CISSP Preparation) Ch 6. Identity and Access Management Authentication Methods Authentication Methods Type 1: Something you know Easiest and weakest method
Identity and Authentication PKI Portfolio
Identity and Authentication PKI Portfolio Gemalto offers comprehensive public key infrastructure (PKI) authentication solutions that provide optimal levels of security. Supporting a wide portfolio of IDPrime
MU2b Authentication, Authorization and Accounting Questions Set 2
MU2b Authentication, Authorization and Accounting Questions Set 2 1. You enable the audit of successful and failed policy changes. Where can you view entries related to policy change attempts? Lesson 2
Radius, LDAP, Radius, Kerberos used in Authenticating Users
CSCD 303 Lecture 5 Fall 2018 Radius, LDAP, Radius, Kerberos used in Authenticating Users Kerberos Authentication and Authorization Previously Said that identification, authentication and authorization
Enhancing cloud applications by using external authentication services. 2015, 2016 IBM Corporation
Enhancing cloud applications by using external authentication services After you complete this section, you should understand: Terminology such as authentication, identity, and ID token The benefits of
Pro s and con s Why pins # s, passwords, smart cards and tokens fail
Current Authentication Methods Pro s and con s Why pins # s, passwords, smart cards and tokens fail IDENTIFYING CREDENTIALS In The Physical World Verified by Physical Inspection of the Credential by an
Guide to Deploying VMware Workspace ONE with VMware Identity Manager. SEP 2018 VMware Workspace ONE
Guide to Deploying VMware Workspace ONE with VMware Identity Manager SEP 2018 VMware Workspace ONE You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/
Login Defender. Quick Guide. Copyright by Cryptware di Ugo Chirico
Login Defender Quick Guide Copyright 2006-2012 by Cryptware di Ugo Chirico Cryptware - http://www.cryptware.it 5/12/2012 Index 1 Introduction... 3 1.1 Main features... 3 2 Installation... 3 3 Control Panel...