![\"Analyzing](\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\")
<\/p>\n<\/p>\n
Recently, identity and access management solution provider Ping Identity announced its findings from the CISO Advisory Council Meeting. CISOs from industries as diverse as healthcare, banking, fashion, education, and technology met together to discuss their mutual challenges and opportunities. The members of the CISO Advisory Council have access to strategic support and can leverage best practices to infosecurity, privacy, and compliance\u2014making their discussions a valuable resource. \u00a0\u00a0\u00a0<\/span><\/p>\n According to Ping Identity CEO Andre Durand: \u201cOur customers are the catalysts of change in the creation of products and services at Ping Identity, so we take their feedback on innovation seriously. These CISOs from leading organizations view identity as a strategic imperative for succeeding as a digital company.\u201d \u00a0<\/span><\/p>\n Ping Identity composed their discussions and collective discoveries from the CISO Advisory Council Meeting into two whitepapers: \u201c7 Trends That Will Shape the Future of Identity\u201d and \u201c8 Things Your C-Suite Should Know About Identity.\u201d The editors here at Solutions Review read through the whitepapers and compiled some of the key findings from both. <\/span><\/p>\n Here is our analysis of Ping Identity’s CISO Advisory Council Meeting whitepapers: <\/span><\/p>\n In the \u201c7 Trends That Will Shape the Future of Identity\u201d whitepaper, Ping Identity discusses the future of authentication via contextual factors such as digital behaviors. A hacker, they reason, won\u2019t use stolen credentials to talk to their victim\u2019s mother (at least, not typically). <\/span><\/p>\n Indeed, Ping\u2019s prediction seems to indicate the viability of behavioral biometrics. As opposed to physiological biometric factors, behavioral biometrics learn about their users through their digital behaviors including their typing habits and patterns. These new kinds of passwordless authentication will provide a more flexible and adaptive low-level identity security system. <\/span><\/p>\n Ping Identity does stress the low-level aspect of passwordless authentication, and we agree. From what we can tell, it will work best in a tiered identity system. <\/span><\/p>\n In this kind of system, more proprietary and sensitive databases require more extensive authentication than less valuable databases or network locations. In this system, passwordless authentication could be used to open up role specific, non-privileged databases as the system recognizes the legitimacy of the user based on their innocuous actions.<\/span><\/p>\n In either case, this kind of continual, low-level identity verification certainly will play a role in the future of enterprise network authentication. \u00a0\u00a0\u00a0<\/span><\/p>\n Or at least, according to Ping Identity and the CISO Advisory Council, it isn\u2019t a uniform solution.<\/p>\n Some kinds of multifactor authentication, such as one-time passwords, will be easier to deploy but less secure. Other MFA protocols such as token-based authentication are more secure but much more difficult to deploy and maintain on a large scale. Ping recommends in the \u201c8 Things Your C-Suite Should Know About Identity\u201d whitepaper that you carefully examine your enterprise to pick the right MFA solution for it.<\/p>\n We agree with this advice and would expand on how you can adapt your MFA to fit with individual employees. A low-level employee with limited access to your most sensitive data could be authenticated with a less secure scheme, whereas a more privileged employee should be required to carry an authentication token.<\/p>\n Alternatively, you can attach different MFA schemes with different databases and digital assets, with the most valuable being more heavily and inconveniently secured. Different factors can fit with different parts of the network; biometrics may not be necessary for everything.<\/p>\n Your MFA solution can be as varied as your options of MFA authentication schemes. Don\u2019t limit yourself or your enterprise’s identity security!<\/p>\n One of the most interesting points from the \u201c7 Trends That Will Shape the Future of Identity\u201d whitepaper is the power of proximity in biometrics. Biometrics haven\u2019t yet experienced the kind of watershed vulnerability moment that passwords had recently. However, hackers are developing the technology to fool biometric sensors. It might only be a matter of time. <\/span><\/p>\n However, Ping Identity does point out that local sensors are much harder to fool and are much harder to compromise as it would require the hacker to be physically in the room with it. While local biometric sensors might be pricey, they can provide a strong protective perimeter for on-premises workers. We do advise against using biometrics at scale over the internet as that can create new security vulnerabilities long-term. \u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n This doesn\u2019t begin to cover the full insights Ping Identity unveils in their whitepapers. You can read more about Ping Identity\u2019s CISO Advisory Council Meeting Whitepapers <\/span>here<\/span><\/a>.<\/span><\/p>\n Other Resources:\u00a0<\/strong><\/p>\n Are Passwords (and Traditional Access Management) Dead?<\/span><\/a><\/p>\n The Current State of Biometric Authentication in IAM<\/span><\/a><\/p>\n Top 4 Questions to Ask Before Selecting A Biometric Authentication Solution<\/span><\/a><\/p>\n Top 4 Authentication Findings from IBM\u2019s Future of Identity Study<\/span><\/a><\/p>\n Survey Reveals Public Opinion on Biometrics and Passwords<\/span><\/a><\/p>\n How to Deploy a Biometric Authentication Solution<\/span><\/a><\/p>\n The 32 Best Identity and Access Management Platforms for 2018<\/a><\/p>\n Centrify Study Shows CEO Disconnect in Cybersecurity<\/a><\/p>\n How IAM Solves Onboarding and Offboarding Challenges<\/a><\/p>\n The Importance of Edge Use Access (With Identity Automation)<\/a><\/p>\n IAM vs CIAM: What\u2019s the Difference?<\/a><\/p>\n The Role of Identity in Digital Transformation<\/a><\/p>\n The Current State of Biometric Authentication in IAM<\/a><\/p>\n\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/01\/biometric-authentication-speedbump-cta.jpg\" "\\"Biometric")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nPasswordless Authentication Might Be the Future<\/b><\/h3>\n
Multifactor Authentication (MFA) Might Not Be the Solution<\/strong><\/h3>\n
Biometrics: Up Close and Personal? <\/b>\u00a0\u00a0\u00a0\u00a0<\/span>\u00a0\u00a0<\/b>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/h3>\n