{"id":4144,"date":"2019-01-07T11:56:29","date_gmt":"2019-01-07T15:56:29","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4144"},"modified":"2019-01-07T11:56:29","modified_gmt":"2019-01-07T15:56:29","slug":"dont-panic-biometric-security-is-still-secure-for-enterprises","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/","title":{"rendered":"Don’t Panic: Biometric Security is Still Secure for Enterprises"},"content":{"rendered":"

\"Don't<\/p>\n

How a year can change the conversation…<\/span><\/p>\n

Security experts once heralded the coming of biometric security<\/a> as a game changer in authentication. The use of physiological factors like fingerprints or irises dominated the conversation of identity and access management\u2019s future. It looked for a moment like the death knell of passwords.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Yet today, news of the various tools and tricks to subvert biometric security methods splash across the headlines. At the end of last year, researchers in Germany unveiled methods to circumvent and fool palm-vein authentication. Facial recognition tools, becoming more prevalent in consumer devices, can be fooled by 3D printed heads. With a simple inkjet printer, hackers can recreate any fingerprint they desire. <\/span><\/p>\n

Panic spreads among observers and experts of biometric security. Yet this panic might prove unfounded, or at least overblown (as can be the case in cybersecurity). Here\u2019s why we think biometric security is still secure and worth researching as part of your next-gen identity and access management solution: <\/span><\/p>\n

Don\u2019t Confuse What is Possible and What is Probable<\/b><\/h3>\n

Academics researching cybersecurity and digital attack tactics constitute one of the most important branches of threat intelligence. Without their tireless work, our identity and access management solutions wouldn\u2019t have the foresight or the preparation necessary to keep pace with hackers.<\/span><\/p>\n

However, a noticeable disconnect can occur between academic and on-the-ground attack scenarios. Put another way, just because a research team can pull something off does not mean hackers will have the same resources or patience to copy them. For example, the German researchers mentioned above needed over 2,000 tries to get their faked palm vein authentication to work. <\/span><\/p>\n

Granted, experts note hackers have become more collaborative and combining their resources they could develop a more consistent method to subvert biometric security. However, hackers as a rule trend towards the easier tactic and the easier targets; hence phishing attacks remain such a popular and effective tool for subverting authentication protocols. More likely, they\u2019ll invest their resources to improving their social engineering than their biometric subversions. <\/span><\/p>\n

While you cannot simply set and forget your biometric security<\/a>, you shouldn\u2019t think of it as any weaker or stronger than any other authentication protocol. Instead, consider it another part of your potential arsenal; it can suit some enterprises\u2019 access management but may not fit with others. <\/span><\/p>\n

Biometric Security Works Best in MFA<\/b><\/h3>\n

We think of access management in binary terms: you are either secure, and hackers cannot break into your network, or not and not. However, a probabilistic model provides a more accurate understanding of cybersecurity. The more layers to your identity authentication, the less likely hackers will be able to circumvent your cybersecurity, and vice versa. \u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

The early assumptions surrounding biometric security\u2014that it could supplant passwords\u2014fuels the current panic in the discourse. However, biometric security remains secure so long as your enterprise treats it as another layer in your overall authentication platform. <\/span><\/p>\n

When you incorporate biometric security<\/a> into your two-factor authentication, your access management becomes stronger; hackers will have to acquire both your employees\u2019 passwords and their biometric information to try and break into the network. \u00a0<\/span><\/p>\n

However, two-factor authentication faces its own scrutiny. Hackers have found ways to subvert the traditional authentication use of mobile devices and insert themselves into the authentication process. Therefore, enterprises embrace multi-factor authentication (MFA) for its more layered approach to access management. <\/span><\/p>\n

Additionally, multifactor authentication can be applied in a granular fashion. Your regular employees may only require two-factor authentication, whereas your most privileged users may need as many as five factors to access your sensitive digital assets. \u00a0\u00a0\u00a0<\/span><\/p>\n

Don\u2019t Get Caught Up With the Physical Factors <\/b>\u00a0\u00a0\u00a0\u00a0<\/span><\/h3>\n

A fixation on the physiological also contributes to the panic surrounding biometric security; fingerprints, vocal recognition, and palm readers grab attention and carry a distinct futuristic aura many find appealing.<\/span><\/p>\n

However, in the cascade of physiological biometric security headlines, it can be easy to forget other forms of biometric security exist. Behavioral biometrics<\/a> such as typing behavior can prove just as informative and accurate as a fingerprint and will prove much harder to hack. <\/span><\/p>\n

Moreover, behavioral biometrics are subtle and non-intrusive, which will appeal to enterprises with employees reluctant to embrace the still new technology. <\/span><\/p>\n

In short, if you are worried about biometric security, you do have some cause for it. However, don\u2019t let your worry blind you to its possibilities for your enterprise and your security.<\/span><\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

How a year can change the conversation… Security experts once heralded the coming of biometric security as a game changer in authentication. The use of physiological factors like fingerprints or irises dominated the conversation of identity and access management\u2019s future. It looked for a moment like the death knell of passwords. Yet today, news of […]<\/p>\n","protected":false},"author":41,"featured_media":2422,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,237,16,76,70,145,124,91],"acf":[],"yoast_head":"\nDon't Panic: Biometric Security is Still Secure for Enterprises<\/title>\n<meta name=\"description\" content=\"Panic spreads among observers and experts of biometric security. Yet this panic might prove unfounded or anticipatory. Here's why.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/\",\"name\":\"Don't Panic: Biometric Security is Still Secure for Enterprises\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"datePublished\":\"2019-01-07T15:56:29+00:00\",\"dateModified\":\"2019-01-07T15:56:29+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Panic spreads among observers and experts of biometric security. Yet this panic might prove unfounded or anticipatory. Here's why.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Findings: The Forrester Wave: Privileged Identity Management (PIM), Q4 2020\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Don’t Panic: Biometric Security is Still Secure for Enterprises\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Don't Panic: Biometric Security is Still Secure for Enterprises","description":"Panic spreads among observers and experts of biometric security. Yet this panic might prove unfounded or anticipatory. Here's why.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/","url":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/","name":"Don't Panic: Biometric Security is Still Secure for Enterprises","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","datePublished":"2019-01-07T15:56:29+00:00","dateModified":"2019-01-07T15:56:29+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Panic spreads among observers and experts of biometric security. Yet this panic might prove unfounded or anticipatory. Here's why.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","width":800,"height":400,"caption":"Findings: The Forrester Wave: Privileged Identity Management (PIM), Q4 2020"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/dont-panic-biometric-security-is-still-secure-for-enterprises\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Don’t Panic: Biometric Security is Still Secure for Enterprises"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4144"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4144"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4144\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2422"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4144"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}