{"id":4370,"date":"2019-04-23T16:40:29","date_gmt":"2019-04-23T20:40:29","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4370"},"modified":"2019-04-30T17:33:23","modified_gmt":"2019-04-30T21:33:23","slug":"why-your-enterprise-needs-behavioral-biometrics-in-your-iam","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/","title":{"rendered":"A Primer to Enterprise Behavioral Biometrics and Why You Need Them"},"content":{"rendered":"

\"A<\/a><\/p>\n

For the future of your enterprise\u2019s identity security, you can\u2019t stop at physical biometric authentication. You must also deploy behavioral biometrics to truly verify each user and their accounts.<\/span><\/p>\n

Behavioral biometrics<\/a> provides a new avenue for enterprises\u2019 authentication schemes. Generally, biometric authentication factors do not face the same problems as more traditional passwords.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

For example, users can forget or lose their passwords, potentially compromising their accounts to hackers or insider threats. Meanwhile, users can\u2019t exactly forget their fingerprints or lose them barring serious accident. <\/span><\/p>\n

In addition, unlike other two-factor authentication schemes, hackers can\u2019t interfere or intercept biometric factors. Biometrics<\/a> can also help establish the access request context, which passwords and hard tokens don\u2019t. It also offers another factor to multifactor authentication and step-up authentication; generally, the more factors between the requester and the network the better. \u00a0\u00a0<\/span><\/p>\n

However, physical biometric authentication<\/a> can still present unique challenges to your identity security. Behavioral biometrics allows enterprises to implement rolling zero-trust authentication on users as they fulfill your business processes.<\/span><\/p>\n

What Are Behavioral Biometrics?<\/b><\/h2>\n

In next-generation identity and access management, logins require more than passwords (something the user knows.) Often, they also ask for something the user has in their possession such as a hard token in traditional schemes.<\/span><\/p>\n

At its core, biometric authentication takes the latter to the next level. With it, users can now use their fingerprints, irises, faces, or voices to verify their identities. As a result, biometric authentication receives a reputation for convenience. After all, users always possess these authentication factors and can usually input them when prompted without fuss.<\/span><\/p>\n

Moreover, biometrics enjoy far more popularity than passwords, and for good reason; even an inexperienced hacker can crack or guess most passwords. Of course, their efforts are bolstered by users frequently reusing their passwords or selecting weak ones such as \u201c123456.\u201d In addition, hackers often use lists of previously stolen passwords to supplement their credential stuffing attacks.<\/span><\/p>\n

In contrast, behavioral biometrics uses a more abstract factor in its authentication\u2014the users\u2019 own human behaviors on their endpoints. Measurable behaviors can include keystroke dynamics, mouse use, signature analysis (when appropriate), and cognitive biometrics.<\/span><\/p>\n

Let\u2019s look at these in more detail.<\/span><\/p>\n

Types of Behavioral Biometrics<\/b><\/h2>\n

Of course, this list does not constitute an extensive list of possible behavioral factors for identity authentication. However, this list can help you think about your own authentication policies. How does your identity security solution compare? Do you utilize these factors already? If not, can you incorporate them?<\/span><\/p>\n

Keystroke Dynamics: <\/b>\u00a0This refers to the measurements of a user\u2019s typing behaviors and patterns. IAM solution providers, such as Optimal IdM, contend typing patterns often prove just as unique as fingerprints. It can monitor how people type certain words, how fast, etc.<\/span><\/p>\n

Mouse Dynamics: <\/b>This resembles keystroke dynamics, but instead measuring the clicks and movements of the mouse. Your IT security team may be surprised by how individual every user is on their endpoints.<\/span><\/p>\n

Signature Analysis: <\/b>This refers to software in which a user can physically sign a digital copy of a document with their finger or a stylus. The analytics engine recognizes the distinct time-to-motion in a baseline signature and thus recognizes discrepancies if they occur.<\/span><\/p>\n

Cognitive Biometrics: <\/b>Perhaps the most abstract of abstract factors, cognitive biometrics includes your everyday actions on the network.<\/span><\/p>\n

For example, if every day you begin by checking up on email communications, the engine recognizes that behavior. Then it establishes the behavior as a baseline, with which it monitors for discrepancies. Therefore, if a hacker impersonates you and immediately tries to access a sensitive database, the IAM solution will detect a possible security event and block the access.<\/span><\/p>\n

Now that we more fully understand the \u201cwhat\u201d of behavioral biometrics, one question remains: why?<\/span><\/p>\n

Why Behavioral Biometrics?<\/b><\/h3>\n

We established above some of the many, many problems with passwords. Suffice to say, the majority of enterprise data breaches begin with stolen, single factor credentials. \u00a0\u00a0<\/span><\/p>\n

However, the power of behavioral biometrics extends beyond security and convenience. In fact, this species of biometrics offers something which few other authentication factors can provide: continuous authentication.<\/span><\/p>\n

As a rule, enterprises should operate under the Zero Trust<\/a> identity security model. This means you should never trust any access request, even from previously approved users, with verifying first. Your enterprise should treat any entity (human or non-human) connecting to its environment as untrusted until it can prove otherwise. <\/span><\/p>\n

For many enterprises’ identity and access management, Zero Trust can resemble a TSA checkpoint; users have to go through multiple security checks before even approaching the plane, and they still must present their ticket at the gate. <\/span><\/p>\n

However, hackers can still exploit some fundamental weak spots in typical authentication. Even the most advanced physical biometrics still operate on a binary model\u2014either authenticated or not. It still constitutes a one-time question\u2014a simple yes or no. <\/span><\/p>\n

External threat actors can absolutely take advantage of this binary system. For example, a hacker could wait for an employee to log in before taking malicious control of their access. Once in, without some kind of check, hackers can wreak havoc on your digital assets. <\/span><\/p>\n

As another example, hackers could steal an employee\u2019s endpoint and use their saved login information. \u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

Conversely, behavioral biometrics constantly affirm the user still falls within baseline behaviors. While the hacker may still penetrate your IT environment, their behaviors will so blatantly differ from the legitimate user\u2019s it should trigger your identity security protocols.<\/span><\/p>\n

Get Your Identity Security In Order<\/b><\/h3>\n

The heart and soul of identity and access management lie with your authentication. The stronger you make your authentication, the stronger your enterprise will be against external and internal threat actors. <\/span><\/p>\n

Behavioral biometrics enables your authentication to monitor your users continuously rather than just at the entry. It establishes a baseline set of behaviors which enables your identity security to recognize hackers posing as your legitimate users. <\/span><\/p>\n

If you want to learn more about biometric authentication and its diversity, you should check out our 2019 Buyer\u2019s Guide. We list the top vendors in the market, their key capabilities, and our Bottom Line on each.<\/span><\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

For the future of your enterprise\u2019s identity security, you can\u2019t stop at physical biometric authentication. You must also deploy behavioral biometrics to truly verify each user and their accounts. Behavioral biometrics provides a new avenue for enterprises\u2019 authentication schemes. Generally, biometric authentication factors do not face the same problems as more traditional passwords. For example, […]<\/p>\n","protected":false},"author":41,"featured_media":4371,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,237,16,76,145,91],"acf":[],"yoast_head":"\nA Primer to Enterprise Behavioral Biometrics and Why You Need Them<\/title>\n<meta name=\"description\" content=\"You can\u2019t stop at physical biometric authentication. You must also consider enterprise behavioral biometrics to truly verify each user and their accounts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/\",\"name\":\"A Primer to Enterprise Behavioral Biometrics and Why You Need Them\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/04\/why-your-enterprise-needs-behavioral-biometrics.jpg\",\"datePublished\":\"2019-04-23T20:40:29+00:00\",\"dateModified\":\"2019-04-30T21:33:23+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"You can\u2019t stop at physical biometric authentication. You must also consider enterprise behavioral biometrics to truly verify each user and their accounts.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/04\/why-your-enterprise-needs-behavioral-biometrics.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/04\/why-your-enterprise-needs-behavioral-biometrics.jpg\",\"width\":800,\"height\":400,\"caption\":\"A Primer to Enterprise Behavioral Biometrics and Why You Need Them\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A Primer to Enterprise Behavioral Biometrics and Why You Need Them\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer's Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A Primer to Enterprise Behavioral Biometrics and Why You Need Them","description":"You can\u2019t stop at physical biometric authentication. You must also consider enterprise behavioral biometrics to truly verify each user and their accounts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/","url":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/","name":"A Primer to Enterprise Behavioral Biometrics and Why You Need Them","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/04\/why-your-enterprise-needs-behavioral-biometrics.jpg","datePublished":"2019-04-23T20:40:29+00:00","dateModified":"2019-04-30T21:33:23+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"You can\u2019t stop at physical biometric authentication. You must also consider enterprise behavioral biometrics to truly verify each user and their accounts.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/04\/why-your-enterprise-needs-behavioral-biometrics.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/04\/why-your-enterprise-needs-behavioral-biometrics.jpg","width":800,"height":400,"caption":"A Primer to Enterprise Behavioral Biometrics and Why You Need Them"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/why-your-enterprise-needs-behavioral-biometrics-in-your-iam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"A Primer to Enterprise Behavioral Biometrics and Why You Need Them"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer's Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4370"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4370"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4370\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4371"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4370"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4370"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4370"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}